Place the crossdomain.xml file in your GlassFish domain's "docroot" directory. So, for example, if your domain is the default "domain1" and you have GlassFish installed at C:\glassfish, you'd place the file at C:\glassfish\domains\domain1\docroot\crossdomain.xml.
[Message sent by forum member 'ddmarx' (ddmarx)]
http://forums.java.net/jive/thread.jspa?messageID=231438