Flash Parameter Injection.ppt

Flash Parameter Injection Agenda Flash 101 Flash Security The Problem Flash Parameter Injection Real Example Testing Flash 101 Background Introduced in 1996 Adds animation and interactivity to Web pages Contains a scripting language: Action Script Very popular Installed in over 99% of PCs Advanced technologies: Flex Adobe AIR Accessing Flash movies Can be embedded in HTML pages Accessing Flash movies Can be embedded in HTML pages Can be accessed directly http://host/movie.swf A “dummy” HTML page may be created (browser dependant) DOM access according to policy Example (Firefox): Glob