This is interesting case. I think this is the ultimate problem:
---------------------------------------------------------------------------------------------------------------------------
<script language="JavaScript">
JavaScript commands
</script>
Because there are different client-side languages, we need to indicate to the browser which language we are using in our scripts. To indicate the scripting language, we added the language attribute to the <script> tag. Since we are using JavaScript, we set the language tag to JavaScript. If you omit the language tag from your <script> tag, the browser will assume that your code is written in JavaScript.
If you place your scripting code outside of the HTML page, you still use the <script> tag but then just add the src attribute. The value of src attribute tells the browser where your JavaScript code is located. For instance,
<script language="JavaScript" src="JavaScript/displayDate.js">
</script>
----------------------------------------------------------------------------------------
For copyrights control to work, I think digital signature must be added on video stream. Probably RSA is calculated with client MAC address and stream is marked with that (or something like that). For yle-areena to work JavaScript must be enabled. JavaScript can exec code on client machine (that's why those setuid's).
Those ~/.adobe -directory files are 'S' setuid with is without 'x', but probably there is piece of Javascript code somewhere inside flashplayer -package
with 's' with 'x', and that code executes digital signature calculation with keys on ~/.abode directory.
Problem for TC is that executable script file path is hardcoded to HTLM-stream, and not found on TC becouse of /usr/local installtion point instead of /usr usually.
Solution is systematic "debian like filestructure" symlinks, which will solve that xsane problem too (or change TC installation point to normal scattered mode.