Removing the crossdomain policy call, as the problem was server-side