<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
</cross-domain-policy>