There are a couple of things I would like to try and understand better:
- Is JavaScript that is executed in Flash compartmentalized from JavaScript that is executed in the browser itself?
- Which JavaScript functionality can be executed through the asfunction handler? Are there limitations to the calls that can be made?
With Flash being so common in web applications, problems like this are really interesting to dissect, academically exploit, and mitigate. It seems like investing some efforts into decompressing, modifying, and compressing SWFs won't be a time wasted. :)
No comments:
Post a Comment