youtube addon for FCKeditor

registered · Site Admin Joined: Aug 22, 2007 Posts: 1775

unicornio wrote:

I'm glad it worked for you semperaye but becareful with flash. It is very dangerous and can compromise your site.
Wink

What is dangerous with the using of flash and youtube?

An iframe is a risk not a flash object. External frames can load bad code into your page. But i think with youtube is it not a problem.

Rolling Eyes

registered · Posted: Mon Jan 21, 2013 7:32 am

If you control the flash object, then I would agree with you neralex. I also agree, in general, about YouTube.

<EDITORIAL COMMENT>
Flash, in general, is active content and can be exploited just as the Java plug-in can and has many attack vectors. Which is why I use tools to disable both by default and then allows me to whitelist a site if I so choose.
</EDITORIAL COMMENT>

Posted: Mon Jan 21, 2013 10:07 am

this is just ax example. Most of the time I decode Flash files in order to take a look at the action script.

http://securitylabs.websense.com/content/Blogs/3165.aspx

Posted: Mon Jan 21, 2013 3:56 pm

montego, yes i know it and you suggestion is the best solution.

unicornio, this not realy an example to say: "flash in general is dangerous"! You can do it with other things on the same way. Anyway. One should never embed external content unaudited. But to decode flash objects I find something pointlessly.