i know the drill to find XSS and injection at sites made with javascript, php, java, mysql...
Basically, I know how to write the bugs, so i know to find them.
Now i'm evaluating a product which the frontend is flash. what are the common mistakes I should be looking?