1063647 - Plugin Whitelist Request: McAfee SiteAdvisor for Mac

Status: RESOLVED WONTFIX

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

Description

[croes]

Plugin name: McAfee SiteAdvisor for Mac
Vendor: McAfee, Inc.
Point of contact: [e-mail]
Current version: 2.0.193
Download URL: https://sadownload.mcafee.com/products/SA/mac/website/McAfeeSiteAdvisor.dmg
Sample URL of plugin in use:  http://www.siteadvisor.com/download/mac.html?q=promo

Plugin details:

McAfee SiteAdvisor
File: SiteAdvisor.plugin
Version: 2.0
SiteAdvisor browser plug-in

MIME Type: application/x-siteadvisorplugin
Description: SiteAdvisor browser plug-in
Suffixes: 

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?
Yes, variations in version number.

Are there any known security issues in current or older versions of the plugin?
No.

Comment 1

[Mike Connor [:mconnor]]

I suspect the template is a little broken, since it doesn't appear to ask for the explanation of how this plugin will be deprecated.

From: https://www.mozilla.org/en-US/about/governance/policies/security/plugin-whitelist-policy/

"Most importantly, the application must describe a credible plan the applicant is pursuing to migrate away from NPAPI-based plugins."

Please provide the relevant information in order for this application to proceed.

As a note, bug 987057 indicated work was going to happen to deprecate SiteAdvisor's NPAPI plugin.  Has this work stalled?

Comment 2

[croes]

Sorry for the lack of clarity on the request.

This request is for the consumer version of SiteAdvisor, which exists separately from the enterprise version (referenced in bug 987057).

On the consumer side, the Windows version of the SiteAdvisor plugin has already been redesigned to use js-ctypes instead of NPAPI.  The corresponding work in the Mac plugin is not yet complete, which is the reason for the whitelist request.

Please let me know if you require any additional details.

Comment 3

[Benjamin Smedberg]

My understanding from a previous conversation was that SiteAdvisor for Mac was a new product, not an existing product. I am wrong about that?

Since the whitelist is primarily a compatibility layer for existing users while you complete a transition, a new product is not typically an appropriate candidate for the whitelist.

Comment 4

[croes]

This is incorrect-- the Mac version of consumer SiteAdvisor is an existing product.  Transition of the Windows version has been completed, but not yet the OS X version.

Comment 5

[Benjamin Smedberg]

We will be shutting down the plugin whitelist, and are not accepting new applications or renewals. I'm going to close this bug as WONTFIX.