<?xml version="1.0" encoding="UTF-8"?>
<access-policy>
	<cross-domain-access>
		<policy>
			<allow-from http-request-headers="*">
				<domain uri="http://*.com" />
				<domain uri="https://*.com" />
				<domain uri="http://*.edu" />
				<domain uri="https://*.edu" />
				<domain uri="http://*.gov" />
				<domain uri="https://*.gov" />
				<domain uri="http://*.mil" />
				<domain uri="https://*.mil" />
				<domain uri="http://*.net" />
				<domain uri="https://*.net" />
				<domain uri="http://*.noaa" />
				<domain uri="https://*.noaa" />
				<domain uri="http://*.org" />
				<domain uri="https://*.org" />
				<domain uri="http://*.us" />
				<domain uri="https://*.us" />
			</allow-from>
			<grant-to>
				<resource path="/" include-subpaths="true" />
			</grant-to>
		</policy>
	</cross-domain-access>
</access-policy>

