This example demonstrates Caja's tamed version of
swfobject.embedSWF().
Examples using <embed> and <object> are in "Flash Embed 2".
Caja does not allow Flash apps to have direct script access.
ExternalInterface.call() is denied by Flash's security sandbox.
However, Flash apps can use Caja's Flash bridge API instead.