We've got a flash file that takes a URL parameter for redirecting on click. When it's hosted from the primary domain, and the SWF is included in HTML from the primary domain, the redirect works properly.

However, when it's hosted on the secondary domain, and the SWF is included in HTML from the primary domain, the redirect doesn't work. I've added a `crossdomain.xml` file to both the primary and secondary domain, thinking that might help. The contents of both `crossdomain.xml` files are included below.

What is it that I'm missing?

**crossdomain.xml**

```
<cross-domain-policy>
    <allow-access-from domain="*"/>
</cross-domain-policy>

```

**EDIT**: Here's the actionscript used for the "redirect".

**actionscript**

```
on (release) {
    getURL(clickTag);
}

```

clickTag is a parameter we're passing in through the querystring.

**EDIT**: After adding `allowScriptAccess="always"` to the embed code, and `<param name="allowScriptAccess" value="always" />` to the `object` tag, the window opens, and the location goes to `/undefined`. Thoughts?

**EDIT**: As requested, here's the actual object/embed code we're using:

```
<object type="application/x-shockwave-flash" data="/files/2348.swc" width="300" height="250" class="ad" onclick="ad_click(169);">
<param name="movie" value="/files/2348.swc?clickTAG=http://www.google.com"/> 
<param value="high" name="quality"> 
<param value="#FFFFFF" name="bgcolor"> 
<param value="always" name="allowScriptAccess"> 
<param value="transparent" name="wmode">
</object> 

```