When using CMS-managed Flash files in templates, best practices would be to use the /content/download action and the eZFilePassthroughHandler to download the Flash, so that it's checked against user permissions.

This worked well in Flash versions prior to 9.3. After Flash 9.3, Flash will not correctly load the SWF file if the SWF is retrieved with a content-disposition of 'attachment'. Unfortunately, the eZFilePassthroughHandler always adds this header, with no way to make exceptions.

Ideally, file.ini could be extended to allow the disposition type to be adjusted based on MIME type, and the default setting could set disposition to inline for Flash files.

Steps to reproduce

1.) Embed a SWF file into a template using the /content/download module
2.) Attempt to load the page on a browser with Flash 10 installed. Right-clicking the movie area will read 'Movie not loaded...'
3.) Comment out the 'Content-Disposition' header from eZFilePassthroughHandler, clear the browser cache and reload the page. The Flash movie will load correctly.