<cross-domain-policy>
<!-- Place top level domain name -->
<allow-access-from domain="ourvfs.com" secure="false"/>
<allow-access-from domain="ourvfs.com" to-ports="80,443"/>
<allow-http-request-headers-from domain="ourvfs.com" headers="*" />
<!-- use if you need access from subdomains. testing/www/staging.domain.com -->
<allow-access-from domain="*.ourvfs.com" secure="false" />
<allow-access-from domain="*.ourvfs.com" to-ports="80,443" />
<allow-http-request-headers-from domain="*.ourvfs.com" headers="*" />
</cross-domain-policy>