IPS equipment fails to make grade

• Book ID: 104392748
• Publisher: Elsevier Science
• Year: 2009
• Tongue: English
• Weight: 72 KB
• Volume: 2009
• Category: Article
• ISSN: 1353-4858
• DOI: 10.1016/s1353-4858(09)70117-5

✦ Synopsis

Adobe responded that the same-origin policy is well understood, and that it would be unfeasible to reengineer the same-origin trust relationship, because it would break all legitimate deployments of a Flash content on the Web. "Sites solve the problem by hosting user-generated content on a different domain," said Adobe spokesperson Peleus Uhley.

Bailey responded that many small websites will not do this, and argued that Adobe's own websites fail to use separate servers for user-uploaded content in some instances.

As at the time of writing, there appears to be no other way to reliably fix this problem other than serving up usergenerated files with headers to avoid them being executed or displayed inline. Alternatively, disabling Flash -essentially destroying the village in order to save it -will solve the problem.