diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index 5af4469de..a8029a905 100644
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -3,5 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*" secure="false"/>
-	<allow-http-request-headers-from domain="*" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
 </cross-domain-policy>
diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index 5af4469de..a8029a905 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -3,5 +3,5 @@
 
 <cross-domain-policy>
 	<allow-access-from domain="*" secure="false"/>
-	<allow-http-request-headers-from domain="*" headers="*"/>
+	<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
 </cross-domain-policy>