Details on the Cross-Site Request Forgery Vulnerability Disclosed at Black Hat

Also, there are no known safe versions of the Flowplayer SWF. If you're hosting it, I can XSRF you. Kill it now. https://t.co/h0TnyAKTsC

— Kevin Riggle (@kevinriggle) August 6, 2015