flash requires the same domain