Report: Microsoft Edge Browser ‘Lets Facebook Run Flash Code Behind Users’ Backs’
Posted by M. C. on February 22, 2019
But we don’t use edge… do we!
by Charlie Nash
According to ZDNet, the browser “contains a secret whitelist that lets Facebook run Adobe Flash code behind users’ backs,” and “allows Facebook Flash content to bypass Edge security features such as the click-to-play policy that normally prevents websites from running Flash code without user approval beforehand.”
“Prior to February 2019, the secret Flash whitelist contained 58 entries, including domains and subdomains for Microsoft’s main site, the MSN portal, music streaming service Deezer, Yahoo, and Chinese social network QQ,” ZDNet reported, adding that Microsoft eventually “trimmed down the list to two Facebook domains earlier this month after a Google security researcher discovered several security flaws in Edge’s secret Flash whitelist mechanism.”…
Be seeing you
MCViewPoint 
Leave a comment