<?xml version="1.0"?>
<cross-domain-policy>
  <allow-access-from domain="*" secure="false"  />
</cross-domain-policy>