Application Sandbox Content

• Has access to AIR APIs:
  
• Use of eval() and other string-to-code techniques are limited. — the following throws an exception:
  
  
  Read more about these restrictions: http://www.adobe.com/go/airhtmlsecurityfaq.
• Can only load JavaScript files from the application resource directory.
• XMLHttpRequest object can reach into remote domains — the following loads http://www.adobe.com:
  
• Can expose functions to the non-application sandbox using the sandbox bridge (the parentSandboxBridge property of the iframe window object).
• Can call functions from the non-application sandbox exposed via the sandbox bridge (the childSandboxBridge property of the iframe window object):
  
• Read more about developing AIR Applications with HTML and Ajax: http://www.adobe.com/go/learn_air_html.