From 26a9f98dc1746e5964276034de893c0a86a13758 Mon Sep 17 00:00:00 2001
From: Matt Amos <zerebubuth@gmail.com>
Date: Wed, 26 Aug 2009 14:49:49 +0000
Subject: [PATCH] Allowing flash to do what all other HTTP clients can (well,
 apart from the bits which are broken by design).

---
 public/api/crossdomain.xml   | 5 +----
 public/oauth/crossdomain.xml | 5 +----
 2 files changed, 2 insertions(+), 8 deletions(-)

diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index cbc8e2546..669cae37d 100644
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -3,8 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>
diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index cbc8e2546..669cae37d 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -3,8 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*"/>
-	<allow-http-request-headers-from domain="*" headers="Authorization"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.org" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.net" headers="*"/>
-	<allow-http-request-headers-from domain="*.openstreetmap.com" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>
-- 
2.43.2