Collected research

Flash Camera and Mic Remember Function and XSS

Flash Camera and Mic Remember Function and XSS ha.ckers.org web application security lab

Points out that Flash Player scopes its camera and microphone permissions to the domain rather than the application, so once a user ticks Remember, any XSS on that origin inherits the granted access. Because a failed attempt raises no modal dialog, it can be chained with CSS history detection and hidden iframes to spy silently.

Record

Document

Flash Camera and Mic Remember Function and XSS ha.ckers.org web application security lab

Published by

ha.ckers.org

Topic

XSS

In the archive

• Collected in the 2010 research round

Tags

• flash
• xss
• attack-chain
• info-leak
• case-study
• iframe
• side-channel
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of ha.ckers.org, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.