I am implementing a javascript client that uses the Flash based XHR replacement [Flensed][1] in the interest of providing more robust api communication than that provided by JSONP.

Apparently the current flash version does not like the current crossdomain.xml.

The only difference I can see between a policy file that works with Flensed, thus Flash 10, is the inclusion of the xml directive and doc-type. In other words, a semantically correct crossdomain xml file.

Can we deploy the proposed version of crossdomain.xml on stackauth and all api endpoints?



**Current:**

<pre>
   &lt;cross-domain-policy>
      &lt;allow-access-from domain="*" />  
      &lt;site-control permitted-cross-domain-policies="master-only"/>  
    &lt;/cross-domain-policy>
</pre>

**Proposed:**

<pre>
    &lt;?xml version="1.0"?>
    &lt;!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
    &lt;cross-domain-policy>
      &lt;allow-access-from domain="*" />  
      &lt;site-control permitted-cross-domain-policies="master-only"/>  
    &lt;/cross-domain-policy>
</pre>


  [1]: http://flxhr.flensed.com