# Why allow flash footers? **URL:** \ **Category:** meta\ **Created:** [April 20, 2003, 7:48am UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729 "2003-04-20T07:48:02Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![kamyab](https://avatars.discourse-cdn.com/v4/letter/k/5e9695/32.png) [@kamyab](https://forum.kirupa.com/u/kamyab)\ **Post date:** [April 20, 2003, 7:48am UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/1 "2003-04-20T07:48:02Z")
Why does this community allow flash footers? Isn’t there a potential exploit, allowing users to hijack accounts and steal passwords? ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 9:48am UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/2 "2003-04-20T09:48:21Z")
A while ago, yes. It has since been ‘corrected’ - its effects can be avoided by the html code used to embed the swf. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 4:38pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/3 "2003-04-20T16:38:58Z")
> Isn’t there a potential exploit, allowing users to hijack accounts and steal passwords? hehe we are a peaceful community - who would ever think of hacking into our little Kirupaville ? Besides Flash Footers Rock - get one :beam: ! ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 4:45pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/4 "2003-04-20T16:45:34Z")
whaddya mean you lock your files ??? ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 4:47pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/5 "2003-04-20T16:47:12Z")
Senocular, what you said is not true. The issue has not been corrected. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 4:51pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/6 "2003-04-20T16:51:14Z")
I read somewhere it can be prevented with the html embed ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:00pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/7 "2003-04-20T17:00:37Z")
Not here, apparently ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:04pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/8 "2003-04-20T17:04:20Z")
unless you dont have any recent flash player installed, everything should be fine… ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:10pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/9 "2003-04-20T17:10:07Z")
I (kamyab) am able to sign into mlk’s account, so something is deffinately wrong. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:11pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/10 "2003-04-20T17:11:56Z")
how did you do that? ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:15pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/11 "2003-04-20T17:15:55Z")
ooops jubba - [http://eyeonsecurity.net/papers/flash-xss.htm](http://eyeonsecurity.net/papers/flash-xss.htm)🙂 ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:16pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/12 "2003-04-20T17:16:01Z")
I will let you know in a PM [edit] ahmed, thats it. Well, almost. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:17pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/13 "2003-04-20T17:17:17Z")
Maybe what Im thinking of is something completely different ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:26pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/14 "2003-04-20T17:26:09Z")
well that’s odd. Over at another forum we have contacted macromedia about this security hole back in july… they said they “have this issue resolved and will be releasing a player very shortly (but within the month of July) as we announced previous.” By now i think everyone would’ve upgraded they’re player… :-\ ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/kirupa/original/3X/6/2/621e5c11736f46532526e61be85940af4230f3e5.png) [@system](https://forum.kirupa.com/u/system)\ **Post date:** [April 20, 2003, 5:31pm UTC](https://forum.kirupa.com/t/why-allow-flash-footers/18729/15 "2003-04-20T17:31:55Z")
I think senocular was talking about this [http://www.macromedia.com/support/flash/ts/documents/allow\_script\_access.htm](http://www.macromedia.com/support/flash/ts/documents/allow_script_access.htm) > AllowScriptAccess can prevent a SWF file hosted from one domain from accessing a script in an HTML page that comes from another domain. Using AllowScriptAccess=“never” for all SWF files hosted from another domain can ensure security of scripts located in an HTML page. What if both the swf and script are on the same domain?