• https://github.com/wisec/swfintruder
• https://www.owasp.org/index.php/Category:OWASP_Flash_Security_Project

• cross domain http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html
• Security.allowDomain http://help.adobe.com/zh_CN/AS2LCR/Flash_10.0/help.html?content=00001493.html EN

• https://www.adobe.com/devnet-docs/acrobatetk/tools/AppSec/index.html
• https://www.adobe.com/devnet-docs/acrobatetk/tools/AppSec/xdomain.html
• https://www.adobe.com/devnet/adobe-media-server/articles/cross-domain-xml-for-streaming.html

httpdrops.wooyun.org_papers_1426