Weak crossdomain.xml PoC