Assuming we want them, we currently don't have the ability to add custom headers to URLRequests[1] and we might want to implement them. If we do, we would also need to tie in validation for a) cross-domain requests (via policy files) and b) disallowed headers[2], as well as look out for known vulnerabilities[3]. [1] http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/net/URLRequestHeader.html [2] http://www.actionscripterrors.com/?p=696 [3] http://www.securiteam.com/securityreviews/5KP0M1FJ5E.html

This bug does not need to block Shumway's 1.0 milestone for ads.