Check for clientaccesspolicy.xml and crossdomain.xml /f #7