Glossary

From FlashSec

[edit] A

ABC

ABC stands for ActionScript Byte Code.

AIR

AIR stands for Adobe Integrated Runtime (former codename Apollo) is a cross-OS runtime environment for building Rich Internet Applications (RIA), using Flash, Flex, HTML and AJAX, that can be deployed as a desktop application.

AMF

AMF stands for Action Message Format. AMF is a proprietary data format created by Macromedia (now Adobe) and used by different mediums: Flash Remoting, NetConnection, NetStream, LocalConnection and Local Shared Objects.

AS

AS files (.as) contain ActionScript source code in simple source files. FLA files can also contain Actionscript code directly, but separate external .as files often emerge for structural reasons, or to expose the code to versioning applications. They sometimes use the extension .actionscript

ASC

ASC has two meanings: ASC files (.asc) contain Server-Side ActionScript, which is used to develop flexible client-server Macromedia Flash Communication Server MX applications. ASC can also refer to ActionScript Compiler.

ASDT

ASDT stands for ActionScript Development Tool. It is a set of plug-ins for the Eclipse Platform that enable developers to write ActionScript2 code in an integrated environment.

ASO

ASO files (.aso) are cache files used during Flash development, containing compiled ActionScript byte code. An ASO file is recreated when a change in its corresponding class files is detected.

AVM

AVM is the ActionScript Virtual Machine.

[edit] C

CFML

CFML stands for ColdFusion Markup Language and is the scripting language used by Adobe ColdFusion and several alternative server environments. It is similar to HTML in that it uses tags, need not be well-formed, and includes a built-in script tag to allow inline scripting within markup.

CFScript

CFScript is an extension of CFML on the ColdFusion platform. CFScript resembles JavaScript.

compc

compc is a command-line compiler written in Java that can be used to compile SWC files from MXML, ActionScript, and other source files such as style sheets, images, and SWF files.

CSRF

CSRF (also known as Session Riding or XSRF) stands for Cross-Site Request Forgeries and describes an attack where requests are forged to merely transmit unauthorized commands to websites under the credentials of authorized users.

[edit] F

fcsh

fcsh (or Flex Compiler Shell) is a utility that provides a shell environment for compiling Flex applications, modules, and component libraries.

FDS

FDS (or Flex Data Services) is a J2EE application that allows Flex developers to create and deploy data-intensive applications.

FLA

FLA files (.fla) contain source material for the Flash application. Flash authoring software can edit FLA files and compile them into .swf files.

Flash

Flash (or Adobe Flash) refers to different things: A multimedia authoring program, the Flash Player and or application files itself.

Flex

Adobe Flex is a software development kit and an IDE for a group of technologies initially released in March of 2004 by Macromedia to support the development and deployment of cross platform, RIA based on their proprietary Macromedia Flash platform.

FLP

FLP files (.flp) are XML files used to reference all the document files contained in a Flash Project.

FLV

FLV stands for Flash Video. It is a proprietary file format used to deliver video over the Internet using a Flash Player. It can also be embedded within SWF files and can be created by Adobe Flash, ffmpeg, Sorenson Squeeze, or On2 Flix.

FMS

FMS stands for Flash Media Server from Adobe.

[edit] J

JavaFX

JavaFX Script is a scripting language designed by Sun Microsystems built on the Java Platform. It is targeted for the same class of interactive web applications for which Adobe Flash, AJAX and Microsoft Silverlight are targeted.

JSFL

JSFL stands for JavaScript Flash and is a scripting language that enables Flash developers to write Flash extensions that can access, modify, and remove files and folders on the local file system.

[edit] L

LocalConnection

The LocalConnection is a very powerfull way to have multiple Flash player instances exchange complex data.

LSO

LSO stands for Local Shared Objects, also referenced as Shared Object, Flash Shared Objects or Flash cookies, are cookie-like data entities used by Adobe Flash Player. These data are stored on the client hard disk and and can consist of basic data types like strings, numbers or even more complex objects.

LXZ

LXZ is an XML and JavaScript description language similar in spirit to XUL, MXML, and XAML. It is used by OpenLaszlo.

[edit] M

MXML

MXML is an XML-based user interface markup language first introduced by Macromedia. Adobe (who acquired Macromedia) gives no official meaning for the acronym, but some developers suggest it should stand for "Multimedia eXtensible Markup Language".

mxmlc

mxmlc is a command line utility written in Java to compile MXML files into SWF files without requesting them from a browser or Flash Player.

[edit] R

RTMP

RTMP stands for Real Time Messaging Protocol and is used by Flash to deliver Real Time Objects, Video, Text/Chat and Audio to clients using a binary TCP connection or polling HTTP tunnel.

RIA

RIA is the acronym for Rich Internet Application. These applications are typically running inside a users web browser or as desktop application.

[edit] S

Shared Objects

Shared Objects, also referenced as Local Shared Object (LSO), Flash Shared Objects or Flash cookies are cookie-like data entities used by Adobe Flash Player. These data are stored on the client hard disk and and can consist of basic data types like strings, numbers or even more complex objects.

Silverlight

Microsoft Silverlight is a proprietary runtime for browser-based RIA, providing a subset of the animation, vector graphics, and video playback capabilities of Windows Presentation Foundation. Silverlight aims to compete with Adobe Flash, the presentation components of AJAXIt and Suns' JavaFX.

SOL

SOL refers to files which store Shared Objects (often as .sol).

SWC

SWC files (.swc) are zip-like files (packaged and expanded by means of the PKZIP archive format) generated by the Flash authoring tool. They are used for distributing components; they contain a compiled clip, the component's ActionScript class file, and other files that describe the component.

SWD

SWD files (.swd) are temporary debugging files used during Flash development.

SWF

SWF files (.swf) are completed, compiled and published files that cannot be edited with Adobe Flash. However, many '.swf decompilers' do exist. Attempting to import .swf files using Flash allows it to retrieve some assets from the .swf, but not all.

SWX

SWX stands for SWF Data Exchange Format. It’s a way of working with data in Flash that uses simple SWF files to exchange data.

SWFML

SWFML stands for ShockWaveFile Markup Language and is a simple text format designed to allow composition and realtime control of swf files which are executed within the Flash player.

SWT

SWT files (.swt) are 'templatized' forms of .swf files, used by Macromedia Generator

SPL

SPL files (.spl) are FutureSplash documents.

[edit] T

Tamarin

Tamarin is a free virtual machine and just in time compiler intended to implement the fourth edition of the ECMAScript standard, commonly referred to as JavaScript 2.

[edit] X

XAML

XAML stands for Extensible Application Markup Language by Microsoft and it is a declarative XML-based language used to initialize structured values and objects.

XSS

XSS stands for Cross-Site Scripting. It's a well known and researched type of security vulnerability which allows an attacker to inject code into the victims client program. It can be used to steal credentials, bypass security restrictions and many more.