16.9 Does not execute uploaded data from untrusted sourcesΒΆ

Do not use Flash, Active-X, Silverlight, NACL, client-side Java or other client side technologies not supported natively via W3C browser standards.

Levels: 1, 2, 3