WebApp Sec mailing list archives

Re: Flash sites


From: Jeremiah Grossman <jeremiah () whitehatsec com>
Date: Wed, 3 Sep 2003 10:05:32 -0700

A flash only web site is no more or less secure than a static HTML site with
the same permission as you've describe. Both sites do nothing
from a server interactivity point of view, which is where web app
vulnerability reside.

the word "safest", becomes somewhat arbitrary.




On Wednesday, September 3, 2003, at 09:14 AM, John Madden wrote:

Hello all,

If a web site contains only flash files and has no
write permissions to modify those flash files, no
default files or other potentially dangerous scripts
can we say that is the "safest" form of a web site ?

Are there any other concerns in auditing a flash based
site ?

Thanks

John

_________


Current thread: