Same here. Based on the changes made in the patch, it seems like the attack involves being able to make cross-domain requests but not being able to read back th

Same here. Based on the changes made in the patch, it seems like the attack involves being able to make cross-domain requests but not being able to read back the response. I didn't think that was the way Java and Flash behaved.