http://krpano.com/docu/xml/#security
Ok, link doesn't take you there directly but here it is.
<security>
Loads a cross-domain policy file from a location specified by the url parameter. By default the Flash Player looks for the policy file located in root of a domain with the filename crossdomain.xml on the server to which a data-loading request is being made. With the crossdomain.url setting the Flash Player can load a policy file from a arbitrary locations.
For more Informations have a look at the Adobe site:
http://www.adobe.com/devnet/articles/cro…_file_spec.html
<security>
<crossdomainxml url="http://.../crossdomain.xml" />
<crossdomainxml url="..." />
...
<allowdomain domain="www.other-domain.com" />
<allowdomain domain="..." />
...
</security>attribute name full variable name type default value
crossdomainxml[...].url security.crossdomainxml[...].url String
Path to the crossdomain.xml on the other server.
attribute name full variable name type default value
allowdomain[...].domain security.allowdomain[...].domain String
Allow access to other domains (necessary for plugins that want access other domains). You can also specify the special domain "*" to allow access from all domains. Specifying "*" is the only way to allow access to nonlocal SWF files from local SWF files that have been published using Access Network Only for the Local Playback Security option in the Flash authoring tool.
I hoe that is what you were looking for.