<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM
    "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    {% for origin in origin_list %}
        <allow-access-from domain="{{ origin }}" secure="false" />
    {% endfor %}
    <allow-http-request-headers-from domain="*" headers="*" secure="false" />
</cross-domain-policy>
