Testing for RIA policy files weakness