Securtity Domain... tried to access incompatible context

I have been trying for over a day now to get my flex application to load the flash file from an external source, but I keep getting the following error.

I have a crossdomain file with wildcard mapping and I use the Security.allowDomain('*'). What the heck is going on???

*** Security Sandbox Violation ***
SecurityDomain 'http://somedomain/en/interface.swf?sessionid=38D1E0B7-5356-42FC-B692-4E1EA019FD9A&gametype=64&affiliateid=1&currency=CHP&language=eng&freePlay=0' tried to access incompatible context 'file:///C:/_Projects/Casino_Old/FlashWrapperWorkspace/CasinoV2Loader/bin-debug/CasinoLoader.html'

I'm using the following code

<fx:Declarations>
    <!-- Place non-visual elements (e.g., services, value objects) here -->
</fx:Declarations>

<fx:Script>
    <![CDATA[
        import flash.display.Loader;
        import flash.display.Sprite;
        import flash.events.Event;

        import mx.controls.Alert;
        import mx.controls.SWFLoader;

        import spark.modules.ModuleLoader;

        protected function initApp():void
        {
            var url:String = "http://somedomain/servlet/com.goblinstudios.lollipop.servlet.CasinoGatewayProxy3?sessionid=38D1E0B7-5356-42FC-B692-4E1EA019FD9A&gametype=64&affiliateid=1&currency=CHP&language=eng&freePlay=0";
            Security.allowInsecureDomain("*");
            Security.allowDomain('*');

            var sprite:Sprite = new Sprite();
            var loader:Loader = new Loader();
            sprite.addChild(loader);

            var lc:LoaderContext = new LoaderContext(true);
            lc.checkPolicyFile = true;
            loader.contentLoaderInfo.addEventListener(Event.COMPLETE, onComplete);
            loader.load(new URLRequest(url), lc);   
        }


        private function onComplete(e:Event):void {
            addElement(e.target.loader.content);
        }
    ]]>
</fx:Script>

Crossdomain.xml


<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <allow-acc开发者_如何学Pythoness-from domain="*" />
    <allow-http-request-headers-from domain="*" headers="SOAPAction"/>
</cross-domain-policy>