make sure that cross_domain_policy value fits the required format