Shumway correctly loads the Norton Secured badge embedded on http://mikesbikes.com/ but not using this direct URL: https://seal.websecurity.norton.com/getseal?at=1&sealid=0&dn=mikesbikes.com&lang=en When Shumway is disabled, Flash correctly loads the direct URL. url=https://seal.websecurity.norton.com/getseal?at=1&sealid=0&dn=mikesbikes.com&lang=en;params=({at:"1", sealid:"0", dn:"mikesbikes.com", lang:"en"}) viewer.js:65:1 Compiler settings: {"appCompiler":true,"sysCompiler":false,"verifier":true} viewer.js:177:1 "Parsing https://seal.websecurity.norton.com/getseal?at=1&sealid=0&dn=mikesbikes.com&lang=en..." viewer.js:178:3 Time from init start to SWF player start: 996 viewerPlayer.js:22:1 Time from init start to SWF loading start: 1033 viewerPlayer.js:43:1 "Session #1: loading https://seal.websecurity.norton.com/getseal?at=1&sealid=0&dn=mikesbikes.com&lang=en" shumway.player.js:51378:11 Session #1: loaded 30/30 shumway.player.js:51371:13 Session #1: closed shumway.player.js:51365:13 Time from init start to main event loop start: 1116 shumway.player.js:51147:68

Norton Secured badge server verifies HTTP referer, so we shall not send it when this SWF is loaded from HTTP (or directly loaded from the browser).

Fixed by PR 2254.