this seems to be a lose-lose situation. Most sites require the use of flash in some way, but at the same time leaving it enabled causes the said security hole. frown