FLV.php's "Player"-method: allowscriptaccess

[qbahamutp]

allowscriptaccess is currently always being set to "true" (on line #251).

Quote from Adobe.com: The AllowScriptAccess parameter can have one of three possible values: "always," "sameDomain," or "never:"

Thus, "true" is invalid. I suggest changing this to "sameDomain" by default. I don't have Git installed, otherwise I'd do it myself and not bother you with it. Sorry ;)