Understanding crossdomain.xml and malicious scripting?
<p>Trying to get my head around why only javascript code can only call back to the same domain the page is hosted from and I understand that you do not want the code sending personal details etc to another domain (could be a malicious site).</p>

<p>However, if the other domain puts a crossDomain.xml file on their server, does that mean now a malicious site could accept calls?</p>

<p>As you can guess I have a rudimentary understanding of how this works, so any help will be appreciated.</p>
