Adding support for crossdomain middleware

User can edit full value of cross domain policies
isn't that just string.gsub! ('\n', '\n\t'), and then appending \n ?