- Same origin issue (file upload)
- (a=(b=doc)
- .createElement('script'))
- .src='http://foo.com/upload.php?'+Math.random(),
- b.body.appendChild(a);
- void(0);
- <?xml version="1.0" ?>
- <cross-domain-policy>
- <allow-access-from domain="*" />
- <allow-access-from domain="*.foo.com" secure="false" />
- </cross-domain-policy>