Browser

Analyzing the Crossdomain Policies of Flash Applications

Free registration required

Executive Summary

Adobe Flash is a rich Internet application platform. Flash applications are often deployed to the Web; The Flash Player plugin is installed on a large fraction of all Web connected PCs. Flash provides a mechanism by which sites can opt in to more expressive information sharing regimes than the same-origin policy for JavaScript allows. A site that wishes to share its content can host a crossdomain policy file, crossdomain.xml, which lists sites authorized to access the sharing site's content, or even a wildcard to allow all access.

  • Format: PDF
  • Size: 570.7 KB