Adding a crossdomain policy for Flash applications

Default to using strict for security reasons.