crossdomain.xml and clientaccesspolicy.xml

clientaccesspolicy.xml

<?xml version="1.0" encoding="utf-8" ?>
<!--<?xml version="1.0" encoding="utf-8" ? >-->
<access-policy>
  <cross-domain-access>
    <policy>
      <!--<allow-from >-->
      <allow-from http-request-headers="SOAPAction">

        <domain uri="https://*"/>
        <domain uri="http://*"/>

        <!--<domain url="*"></domain>-->
      </allow-from>
      <grant-to>
        <resource include-subpaths="true" path="/"></resource>
      </grant-to>
    </policy>
  </cross-domain-access>

</access-policy>

crossdomain.xml

<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE cross-domain-policy SYSTEM
"http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
  <allow-http-request-headers-from domain="*" headers="*"/><!--//"SOAPAction,Content-Type"/>-->
</cross-domain-policy>