Serve a restrictive crossdomain.xml at your site's root