This pdf paper describes a way to manage cross-domain communication using JavaScript with a bit of help from the server.
Does anyone have experience with this approach? I know CrossSafe has an implementation, but it's pretty quiet over there. (NSFW spam in that group.)
While we're here, does anyone know of a good flash bridge? I'm OK with crossdomain.xml as a solution, too.