2010/6/9 Aaron Ward edugamer@gmail.com:
While attempting to locate the current Wikimedia policy I ran into random comments with warnings about the security risks involved in using the cross-domain-policy. I also discovered that Bugfix 1.9 states "Partial support for Flash cross-domain-policy filtering."
Also, please note that any cross-domain policy that's blocking you is on *your client's* side, not on Wikimedia's side. We don't care where API requests come from, but clients do care where you send API requests to (same domain only in most cases).
Roan Kattouw (Catrope)