Closed Bug 906441 Opened 11 years ago Closed 11 years ago

plugins.click_to_play is ignored for flash, exposing security issues

Categories

(Firefox :: Untriaged, defect)

Product:
Firefox
Component:
Untriaged
Version:
23 Branch
Platform:
x86_64
Windows 7
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED DUPLICATE of bug 865809

People

(Reporter: bugzilla.98020084357862, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:23.0) Gecko/20100101 Firefox/23.0 (Beta/Release)
Build ID: 20130814063812

Steps to reproduce:

Set plugins.click_to_play = true.
Update to latest firefox.
Visit any site with flash.



Actual results:

flash plugin starts, causing security issues.


Expected results:

placeholder for flash plugin should be visible and no plugin should run until selected.

In this case, firefox lowered the security settings by itself.
Firefox MUST NOT lower security settings on its own. If there is a conflict during update, ask the user.

Please clarify how I can force all plugins to only run after clicking on a placeholder. The current status exposes security issues and forces me to disable the flash plugin, making some sites unusable.
Status: UNCONFIRMED → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.