flash_cont = 
"<object classid='clsid:d27cdb6e-ae6d-11cf-96b8-444553540000' codebase='http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0' width='"+FS_width+"' height='"+FS_height+"' id='"+FS_name+"' align='middle'>"
			+"<param name='allowScriptAccess' value='sameDomain' />"
			+"<param name='movie' value='"+FS_movie+"' />"
			+"<param name='quality' value='high' />"
			+"<embed src='"+FS_movie+"' quality='high' bgcolor='#ffffff' width='"+FS_width+"' height='"+FS_height+"' name='"+FS_name+"' align='middle' allowScriptAccess='sameDomain' type='application/x-shockwave-flash' pluginspage='http://www.macromedia.com/go/getflashplayer' />"
+"</object>";
document.write(flash_cont);


function checkXss(elem)
{
	var str = elem.value;
	var length = str.length;
	if (length == 0) {
		alert (" ³»¿ëÀ» ÀÛ¼ºÇØÁÖ¼¼¿ä ");
		return false;
	}

	var ret;

	str = checkXssLevel1 (str) ;
	if (str == null || str == "") {
		alert (" ÇØ´ç ½ºÅ©¸³Æ® ÅÂ±×´Â »ç¿ëÇÒ ¼ö ¾ø½À´Ï´Ù ");
		elem.value = "";
		return false;
	}
	str = checkXssLevel2 (str) ;
	elem.value = str;
	alert(elem.value);
	return true;
}

function checkXssLevel1 (str)
{
	var newStr = str.toLowerCase();
	if (newStr.indexOf("document.cookie") != -1) {
		alert ("document.cookie");
		return "";
		}
	else
		return str;
}

function checkXssLevel2 (str)
{
	var newStr = str.toLowerCase();

	var filter1 = new Array("cookie", "<script", "<base", "<meta", "<?import", "<iframe", "<javascript");
	var xfilter1 = new Array("x-cookie", "<x-script", "<x-base", "<x-meta", "<x-?import", "<x-iframe", "<x-javascript");

	var flag = false;
	for (i = 0; i < filter1.length ; i++) {
		if (newStr.indexOf(filter1[i]) != -1) {
			newStr = newStr.replace(filter1[i], xfilter1[i]);
			flag = true;
		}
	}

	var filter2 = new Array( "\"", "<", ">", "#", "&");
	var xfilter2 = new Array("&quot", "&lt;", "&gt;", "&#", "&amp;");
	if (flag == false) {
		for (i = 0; i < filter2.length ; i++) {
			if (newStr.indexOf(filter2[i]) != -1) {
				newStr = newStr.replace(filter2[i], xfilter2[i]);
			}
		}
	}

	alert(newStr);
	return newStr;

}

