Internet Explorer 10 uses the CV list to enable specific sites to run with the Flash Player functionality supported in Internet Explorer 10. Microsoft manages and distributes the CV list and determines which sites go on the list. Decisions regarding how sites that require Flash Player are treated on the CV list are evaluated based on the quality of experience of the site in Internet Explorer 10, taking into consideration factors like performance, responsiveness, touch interaction, security, privacy, and battery life.
Unless I misunderstood it, this is only applicable to IE10 in Metro* though. If Flash content is found by IE10 Metro that is not on the whitelist, then the user is prompted to open that page in IE10 desktop, where it'll run fine.
Still, it's pretty bad. Would like to know how this transfer from IE10 Metro to IE10 desktop would handle session - if you're looking at content that's behind a login, would this force the user to log in again?
I wonder if this will mean some developers will end up discouraging users from using IE10 Metro.