<?xml version="1.0"> <cross-domain-policy> <allow-access-from domain="*" secure="false"/> </cross-domain-policy>