The Security.exactSettings value should remain set at the default value of true. Setting this value to false could make the SWF vulnerable to cross-domain attacks.
== Noncompliant Code Example
----
Security.exactSettings = false;
== Compliant Solution
Security.exactSettings = true;