Explicitly deny access to any domain except the current one
<cross-domain-policy> </cross-domain-policy>