@mastahyeti: No worries!  You're not that familiar with the code, which is a bit confusing for most people anyway with the ActionScript and JavaScript interplay.  We appreciate the security notes all the same.  In fact, the discussion with you made me think of an even easier way to ensure this code is safe without having to add a JSON string encoder (will update later tonight). :+1: