flash: retrieve hostname from location, not top.location (#200, #201)

top.location is wrong licensing- and functionality-wise.

- license is validated against the *src* of the iframe, i.e.
  location.hostname
- top.location.hostname is not available in iframes for security reasons
  in Firefox and Opera and stalls the player in loading state

May also solve the elusive #135.