<?xml version="1.0"?>
<!-- http://www.foo.com/crossdomain.xml -->
<cross-domain-policy>
  <allow-access-from domain="*.common.esteeonline.com" />
  <allow-access-from domain="*.esteelauder.com" />
</cross-domain-policy>