title: Flash - How come I do not receive a security warning to allow cross-site requests?
body: <p>I am using the URLLoader class to send data to a script that sends an email with that data; the URLLoader is also used to receive the return data on the status of the request. This email script is located on another domain (<a href="https://www.webscript.io/" rel="nofollow">webscript.io</a>, in this case; they host scripts written in LUA that can perform various functions when called). I don't want to have to get them to host a crossdomain.xml file, but when I visit the page to use the Flash app, I don't even get a security warning. Is that not the default action when there is cross-domain scripting in a Flash application without a crossdomain.xml file?</p>
  
  <p>For your reference, here is the application: <a href="http://www.canadadocks.ca/build-dock-app/" rel="nofollow">http://www.canadadocks.ca/build-dock-app/</a></p>