I cant approve that, but i see a number of complaints after upgrading to 3.6.1, that it has broken flash client support. Hasn't tried SparkWeb on my production server with 3.6.1 yet. Will do on Friday maybe.
http://www.igniterealtime.org/community/message/183044#183044 (with a suggestion to patch)
also Dele is speaking about the handling of null terminated policy-file requests here http://www.igniterealtime.org/community/docs/DOC-1553#comment-4716 (comments at the end)