When playing Flash (SWF) content from local filesystem, developers have historically been able to configure content to exclusively read from the filesystem, or communicate to the network. This feature will be helpful in mitigating protocol hijacking attacks and cookie hijacking.ĭisabling local-with-filesystem access in Flash Player by defaultīeginning with Flash Player 23, local-with-network permissions will now be applied to all local SWF content, regardless of the preference chosen at compile time. Flash Player will acknowledge the STS header in the response and further request to the same domain will always be HTTPS. This will be particularly helpful when a SWF calls another SWF (child SWF) that is present in HSTS enabled server. Flash Player will now acknowledge the STS header in HTTPS response. HTTPS response may have a Strict-Transport-Security(STS) header field that requests the user agent to make further requests in HTTPS. HSTS is an IETF standard, which enforces user agents (browsers) to use HTTPS for communication instead of HTTP. To disable AsynchronousDrawing support in Firefox, go to “about:config” in the search bar of the browser and set “.enabled” to false.īeginning with Flash Player 23, we have introduced support for HSTS (HTTP Strict Transport Security). The choice of which Async Drawing path is used (hardware or software) depends on whether the browser supports hardware or software Async Drawing modes. It is currently available from FP version 23.0 in Firefox Nightly 51.0a1, the Firefox versions supporting the feature is yet to be announced. If asynchronous drawing is unavailable for any reason, the plugin falls back to using the existing synchronous drawing model.ĪsyncDrawing is supported in NPAPI Plugin on Windows desktop platforms only. It is not used in fullscreen mode, or in windowed mode where the plugin draws directly to its own window. This feature allows wmode “direct” (wmode opaque and transparent) to behave as “windowless” in hardware accelerated async drawing. It is used only when the stage is composited with rest of the content in the browser window.

Async Drawing refers to the method that the browser and Flash Player use to exchange a bitmap surface where Flash Player draws the SWF content.

Adobe flash player for firefox 23.0