Disallow policy files anywhere on the target server, including a master policy file.
Usage
Source
XPermittedCrossDomainPolicies.none()