<cross-domain-policy>
   <allow-access-from domain="www.bcmd.org" />
   <allow-access-from domain="bcmd.org" />
</cross-domain-policy>