<cross-domain-policy>
   <allow-access-from domain="*" />
</cross-domain-policy>