AFAIK, the problem still exists that `var flashvars:Object = LoaderInfo( this.root.loaderInfo ).parameters;` is loading variables both from the `FlashVars` HTML tag attribute, but also from URL parameters. I think that you do need to do some escaping of the input before you start building JS functions using it in `amdWrappedDispatch `. 

Also, because it is going straight into JS you will need to escape more than just `\`. Most of the info I am finding on escaping for JS suggest using `\x` or `\u` notation for anything with an ASCII value of less than 256, but that won't work here because the input isn't going into a string, it is going into a function name.

I think the best solution would be to strip out any `[^\w]` characters for `amdLoaderName` and any `[^\w/]` characters for `amdModuleId `, since it needs to specify a path.