This basically means that content loaded for example from the root of your AIR application can only load resources from the local sandbox while content loaded from a non-application sandbox (for example <a href="http://www.example.com)">http://www.example.com)</a> can load content only from that specific domain.