: Historically, this included ActiveX and Shockwave Flash , which could operate outside a restricted "sandbox" environment to interact directly with the operating system.
The DoD typically organizes mobile code into three distinct levels: Dod Mobile Code Risk Categories
: Mobile applications can use sensors like GPS, microphones, and cameras to disclose non-public information or Personally Identifiable Information (PII) without user consent. Use of Unclassified Mobile Applications in ... - DoD CIO : Historically, this included ActiveX and Shockwave Flash
While the primary policy governing these categories is , the specific risk tiers are structured by the level of access the code has to system resources. The Three Mobile Code Risk Categories this included ActiveX and Shockwave Flash
: Systems often run code (like JavaScript on a website) without real-time human review.