<cross-domain-policy>
  <allow-access-from domain="wdirect.apple.com" />
  <allow-access-from domain="*.apple.com" />
</cross-domain-policy>