From 002e008857c7712fa69218881478f6d9bcba3dd7 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Tue, 30 Jan 2018 12:59:47 +0000
Subject: [PATCH] Allow cross domain flash access from http sites

---
 public/api/crossdomain.xml   | 2 +-
 public/oauth/crossdomain.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index 5af4469de..a8029a905 100644
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -3,5 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*" secure="false"/>
-	<allow-http-request-headers-from domain="*" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
 </cross-domain-policy>
diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index 5af4469de..a8029a905 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -3,5 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*" secure="false"/>
-	<allow-http-request-headers-from domain="*" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
 </cross-domain-policy>
-- 
2.43.2