Is Flash Player - enable flash content safe?

Flash Player can let sandboxed Flash content ask the extension to fetch arbitrary URLs.

When a user launches Flash content, the extension opens its player page with metadata from the page and bridges Flash fetch and XHR calls through extension messaging. That player accepts fetch messages without checking their origin, so sandboxed Flash content can ask the extension page to request arbitrary URLs using the extension's host permissions and return the response data.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.