Fixes a Flash-based XSS

ExternalInterface.call based XSS fixed.