Type

   name="allowScriptAccess" value="sameDomain" />