Create cross-domain-insecure.conf