From:
http://www.adobe.com/devnet/security/security_zone/mpsb02-08.html

When AllowScriptAccess is "never", outbound scripting (ActionScript getURL() actions that specify a scripting statement) will always fail.


Now i see and understand, damn...