Add flash rosetta exploit module for stealing URLs.
STEAL_URL -> STEAL_URLS.
Patch rhost to display hostname of JSONP_URL.
Update code as per @wvu's code review.
Remove unnecessary ||= and ivars.
Land #3508, CVE-2014-4671 Flash JSONP disclosure