I am in a similar situation and facing the same problem as mentioned above.
In the flash,
getURL("Javascript
:MM_openBrWindow('public_profile .jsp?sub_id="+id+"','public_profile','toolbar=no,s tatus=no,menubar=no,resizable=yes,scrollbars=no,wi dth=452,height=365')");
In the xsl,
<script language="JavaScript" src="scripts/flashcontrol.
js" type="text/JavaScript"></script>
In flashcontrol.
js,
function MM_openBrWindow(theURL,winName,features) { //v2.0
window.open(theURL,winName,features);
}