diff --git a/api/assetProxy.js b/api/assetProxy.js
index 1ab3b7f5..eb41b7b4 100644
--- a/api/assetProxy.js
+++ b/api/assetProxy.js
@@ -7,6 +7,7 @@ const streamPipeline = util.promisify(stream.pipeline);
 const VALID_URL_PATTERNS = [
   /^http:\/\/images\.neopets\.com\/items\/[a-zA-Z0-9_ -]+\.gif$/,
   /^http:\/\/images\.neopets\.com\/cp\/(bio|items)\/data\/[0-9]{3}\/[0-9]{3}\/[0-9]{3}\/[a-f0-9_]+\/[0-9]+\.svg$/,
+  /^http:\/\/images\.neopets\.com\/cp\/(bio|items)\/swf\/[0-9]{3}\/[0-9]{3}\/[0-9]{3}\/[a-f0-9_]+\.swf$/,
 ];
 
 export default async (req, res) => {
diff --git a/src/app/WardrobePage/support/ItemLayerSupportUploadModal.js b/src/app/WardrobePage/support/ItemLayerSupportUploadModal.js
index 082c58d5..ee698831 100644
--- a/src/app/WardrobePage/support/ItemLayerSupportUploadModal.js
+++ b/src/app/WardrobePage/support/ItemLayerSupportUploadModal.js
@@ -321,7 +321,7 @@ function ItemLayerSupportFlashPlayer({ swfUrl, backgroundColor }) {
         >
           <object
             type="application/x-shockwave-flash"
-            data={swfUrl}
+            data={`/api/assetProxy?url=${encodeURIComponent(swfUrl)}`}
             width="100%"
             height="100%"
           >