Helmet's crossdomain.xml middleware
===================================

Adobe defines [the spec for crossdomain.xml](http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html), a policy file that grants some Adobe products (like Flash) read access to resources on your domain. An unrestrictive policy could let others load things off your domain that you don't want.

To serve up a restrictive policy:

```javascript
var crossdomain = require('helmet-crossdomain');
app.use(crossdomain());
```

This serves the policy at `/crossdomain.xml`. By default, this is case-insensitive. To make it case-sensitive:

```javascript
app.use(crossdomain({ caseSensitive: true }));
// This will now ONLY match all-lowercase /crossdomain.xml.
```

This doesn't make you wildly more secure, but it does help to keep Flash from loading things that you don't want it to. You might also *want* some of this behavior, in which case you should make your own less-restrictive policy and serve it.

Helmet's crossdomain.xml middleware
===================================

[![Build Status](https://travis-ci.org/helmetjs/crossdomain.svg?branch=master)](https://travis-ci.org/helmetjs/crossdomain)

Adobe defines [the spec for crossdomain.xml](http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html), a policy file that grants some Adobe products (like Flash) read access to resources on your domain. An unrestrictive policy could let others load things off your domain that you don't want.

To serve up a restrictive policy:

```javascript
var crossdomain = require('helmet-crossdomain');
app.use(crossdomain());
```

This serves the policy at `/crossdomain.xml`. By default, this is case-insensitive. To make it case-sensitive:

```javascript
app.use(crossdomain({ caseSensitive: true }));
// This will now ONLY match all-lowercase /crossdomain.xml.
```

This doesn't make you wildly more secure, but it does help to keep Flash from loading things that you don't want it to. You might also *want* some of this behavior, in which case you should make your own less-restrictive policy and serve it.

Add Travis CI badge to readme
Add Travis CI badge to readme