title: What does this crossdomain.xml imply?
body: <p>When a site has the following crossdomain.xml configurations. What does the following imply?</p>
  
  <p>Second, if Site A (http) hosts a flash uploader script which uploads to S3, is this crossdomain.xml file safe to have on the S3 root dir?</p>
  
  <pre><code>&lt;?xml version="1.0"?&gt;
  &lt;!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"&gt;
  &lt;cross-domain-policy&gt;
    &lt;!-- 
      Read this: www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html 
    --&gt;
  
    &lt;!-- Most restrictive policy:
    &lt;site-control permitted-cross-domain-policies="none"/&gt;
    --&gt;
  
    &lt;!-- Least restrictive policy: --&gt;
    &lt;site-control permitted-cross-domain-policies="all"/&gt;
    &lt;allow-access-from domain="*" to-ports="*" secure="false"/&gt;
    &lt;allow-http-request-headers-from domain="*" headers="*" secure="false"/&gt;
  
    &lt;!--
      If you host a crossdomain.xml file with allow-access-from domain="*"    
      and don’t understand all of the points described here, you probably     
      have a nasty security vulnerability. ~ simon willison
    --&gt;
  &lt;/cross-domain-policy&gt;
  </code></pre>