Dishonest users might try to hack your application,
whether you build a small portal site where users can log in and
read articles or a large e‑commerce store. For this reason, consider
the following steps to secure your application.
-
Post
data to HTTPS for data that needs to be secured. Encrypt values
in Flash before sending them to a remote
server to be processed.
Important: Never store
any information or code in a SWF file that you don't want users
to see. It is easy to disassemble SWF files and view their contents
using third-party software.
-
Add a cross-domain policy, which prevents unauthorized domains
from accessing your assets.