All Questions
2 questions
4
votes
5
answers
4k
views
Is it dangerous to serve user-uploaded Flash (SWF) files?
I'm working on a site that has CMS functionality. I'm considering allowing users to upload Flash (.swf) files and then displaying them on my site.
Is this a bad idea?
Is there a way to do this ...
- 141
2
votes
2
answers
1k
views
Why should crossdomain.xml be present if user-uploaded files exist?
In his book Michal Zalewski says:
To protect your users, include a top-level crossdomain.xml file with the permitted-cross-domain-policies parameter set to master-only or by-content-type, even if ...
- 5,467