Fix crossdomain and policy-file-request