Other nomination
Flash Camera and Mic Remember Function and XSS
Points out that Flash Player scopes its camera and microphone permissions to the domain rather than the application, so once a user ticks Remember, any XSS on that origin inherits the granted access. Because a failed attempt raises no modal dialog, it can be chained with CSS history detection and hidden iframes to spy silently.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.