- <site-control permitted-cross-domain-policies="master-only"/>
- <allow-access-from domain="*"/>
- <allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
- <allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
- <allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
-</cross-domain-policy>
\ No newline at end of file