<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
  <site-control permitted-cross-domain-policies="master-only" />
	<allow-access-from domain="hardrock.sitestream.com" />
	<allow-access-from domain="http.vitalstreamcdn.com" />
	<allow-access-from domain="hardrock.http.internapcdn.net" />
	
	<allow-access-from domain="http.youtube.com" />
  	<allow-access-from domain="rock-shop.hardrock.com" />
	<allow-access-from domain="rockshop.hardrock.com" />
  	<allow-access-from domain="*.hardrock.com" />
  	<allow-access-from domain="*.hardrocklive.com" />
  	<allow-access-from domain="localhost" />
  	<allow-access-from domain="localhost:100" />
  	<allow-access-from domain="*.staging-hardrockhotels.com" />
	<allow-access-from domain="*.staging-hardrockhotelorlando.com" />
		<allow-access-from domain="*.hardrockhotels.com" />
  	<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>