When connecting a SWF to a remote CSV or Shapefile located on a server (website or portal) where the content is accessed via HTTP(s), you need to have a crossdomain.xml policy file.
How do you know if you already have one?
Simply type in the root domain and add “/crossdomain.xml” Example, http://centigonsolutions.com/crossdomain.xml.
When deploying a cross domain policy file it must be placed on the root directly where your data or data files reside.
Example IIS root: /inetpub/wwwroot
Example Tomcat root: /webapps/ROOT