jonrohan/ZeroClipboard — pull request #56 by jonrohan (2012-12-31 21:42:34+00:00)
Title: For Security, removing the allowDomain wildcard default.

A threat isn't directly obvious, but just setting a wildcard by default is not a security best practice.

```
flash.system.Security.allowDomain("*");
```

This pull request now looks for a `trustedDomains` flashvar and sets the domain based on that. If none is provided, then the script will only allow same domain.

The domains can be set via `setVars` call before the client is created.

```js
ZeroClipboard.setVars({
trustedDomains: "*"
});
```

Thanks @mastahyeti