Changed allowScriptAccess' value from never to sameDomain