Security changes in Flash Player 9

Policy files allow servers to open up their data selectively to client content from other domains, or generally to content from anywhere. Since the introduction of policy files, domain boundaries have been less of a barrier for authors of rich Internet applications.

 

The basic premise of policy files remains valid, and Flash developers can continue to rely on policy files just as they have since Flash 6. To address the new concerns, however, Adobe is specifying some stricter rules for the use of policy files. Additionally, there are a number of improvements that make policy files more useful and usable.

 

The article recommends a few actions to be taken to respond to the latest standards of security. It also addresses policy file control and DNS issues, and comments on the improvements made.

 

You can find a detailed introduction to policy files here.