All Questions
Tagged with flash javascript
11 questions
46
votes
3
answers
6k
views
For an end-user, is HTML5/JavaScript more secure than Flash?
I’m not talking about server-side security or even necessarily XSS vulnerabilities, as these are attacks on vulnerable services and do not use any pre-existing vulnerabilities on the client side to ...
- 1,027
6
votes
1
answer
2k
views
Detecting disabled Chrome plugins using JavaScript
My cable was on the fritz this weekend and I had to visit a friend to watch HBO online. Something weird happened that has been bothering me.
I have disabled the Flash plugin on Chrome, since all ...
- 4,006
5
votes
4
answers
832
views
Is flash or javascript a bigger security concern? [closed]
Many flash website whitelisting extensions for chrome (such as flashblock and flashcontrol) use javascript in order to selectively block Adobe Flash from functioning. Thus, In order to get this ...
- 67
3
votes
2
answers
870
views
Exploiting flash XSS holes
I have a URL to a flash file. Sample :-
http://abc.mydomain.com/Findme.swf
Now, there is a parameter called xmlpath as :-
http://abc.mydomain.com/Findme.swf?xmlPath=something.
Is it not that ...
- 1,522
3
votes
2
answers
355
views
When receiving PDFs from unknown sources, is it sufficient to remove dynamic content to minimise attack surface?
My company allows customers to upload PDFs, JPEGs and PNGs to our servers, which are then viewed by clients. We want to minimise the potential for attack on the clients. While the image formats are ...
- 161
3
votes
1
answer
393
views
Is it possible to get a flash src after a redirect or an element inside an embed/object/iframe tag (cross-domain)?
The URL example.com/auth will automatically redirect the user (HTTP 302) to example.com/signed_in.SWF?token=SENSITIVE.
Is it possible for an attacker to steal the token, using javascript or flash, in ...
user61429
2
votes
2
answers
824
views
Is a browser with disabled scripts and disabled java enough against malware
Is a browser like Firefox with disabled scripts (for example via a plugin like no-script) and disabled Java enough to be protected against drive-by-malware from the internet.
Of course this does not ...
- 578
2
votes
1
answer
615
views
How can javascript files represent a flash-based XSS vulnerability?
I am hosting a static website (no PHP etc., just HTML/JavaScript/CSS) with a security-conscious hoster that proactively removes vulnerable files. This is fine with me.
However, their last report ...
- 4,143
1
vote
2
answers
1k
views
Is HTML5/JavaScript more secure than Flash/Java, as the browser becomes more like an OS? [closed]
I have been asked to post this here:
I want to focus on the security of the end-user in these two different scenarios:
1) Pre HTML 5 where the applications and so on lived in plug ins outside the ...
1
vote
0
answers
429
views
Adobe Flash-based site's UI misbehaves when it's accessed through a VPN. Is it leaking my real ip address?
Here is a setup:
A Linux/Windows VM at home (will call it "hidden VM" from now on) which is placed into an isolated environment (it's located in its own isolated virtual network, and the only way out ...
- 275
0
votes
1
answer
232
views
Secure keyboard entry with JavaScript or Flash?
Is it possible to perform secure keyboard entry (similar to what is offered in the OS X Terminal app) using only web technologies and/or Flash?
If not, is there any way to more broadly guarantee ...
- 2,412