Please do not add allow domain "*" into your crossdomain.xml EVER unless on a CDN domain (a domain specifically for hosting a CDN) or serving static files. This

Please do not add allow domain "*" into your crossdomain.xml EVER unless on a CDN domain (a domain specifically for hosting a CDN) or serving static files. This breaks SOP.