January 6th, 2011, 10:29 AM
|
 |
Massive Poster
|
|
Join Date: May 2010
Posts: 3,988
|
|
Flash sandbox broken?
Flash Player sandbox can be bypassed
Quote:
... it is in principle possible to send files to a server using the file: protocol handler, but that this is only possible within the local area network. He has identified another protocol handler which can be used to send data to remote servers – mhtml. ...
... However, this particular issue does not represent a major risk as few users download SWF files and run them locally. SWF files are generally loaded directly in a browser Flash plug-in, which uses a different rule set.
|
|
