X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/c742d88309a1750c46ba5aa5acbcfe2b91742136..34c9d9cc6b5008886218e9e6154cb84bc87aeba7:/public/oauth/crossdomain.xml

diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index cbc8e2546..a8029a905 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -2,9 +2,6 @@
 <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
 
 <cross-domain-policy>
-	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-access-from domain="*" secure="false"/>
+	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
 </cross-domain-policy>