Originally published on eve.gd on 19 May 2007, last updated 6 September 2026.
Read this post on the web (with images, PDF and citation details)
Stefano Di Paola presented an interesting paper on Flash security at OWASP 2007 which highlights the dangers of HTML being rendered from within Flash via GET querystrings. Of particular note is the non-sanitization of comments (filter evasion by // .jpg) so check it out.
This reference list has been generated, in many cases, through an automated process and may therefore contain errors or incomplete metadata. It is provided purely as assistance for finding the items mentioned within this post.
1. Di Paola OWASP 2007 Flash application testing paper <http://www.wisec.it/en/Docs/flash_App_testing_Owasp07.pdf>