Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/wstg-conf-08
Test RIA Cross Domain Policy
Passed 20 of 22 test cases with the skill, and 19 of 22 without it.
2 fixed18 passed either way1 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
A team is refactoring a legacy Web API that used to serve Flash clients via crossdomain.xml. They are deleting the policy file and want to implement modern cross-origin security controls. What HTTP header mechanism replaces RIA policy files in modern web applications?
| Checked | Without skill | With skill |
|---|---|---|
| recommends implementing CORS headers | Passed | Passed |
| specifies setting Access-Control-Allow-Origin to trusted origins | Missed | Passed |
The instructions your model reads when the skill loads.
WSTG-CONF-08
Test RIA Cross Domain Policy
Note: This test case has been deprecated by OWASP as Flash and Silverlight technologies are no longer widely used. However, legacy applications may still use these technologies.
Rich Internet Application (RIA) cross-domain policy files control how Flash and Silverlight applications can access resources across different domains. Misconfigured policy files can allow unauthorized cross-domain access, leading to data theft and other security issues. While these technologies are largely obsolete, legacy applications may still require this testing.
/crossdomain.xml (Adobe Flash)/clientaccesspolicy.xml (Microsoft Silverlight)*)# Check for Flash crossdomain.xml
test cases passed, vs 19 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.