Cross-domain policy fix