<cross-domain-policy>
  <allow-access-from domain="*" /> 
</cross-domain-policy>