The default bug view has changed. See this FAQ.

NoScript blocks "mediasource:" content which breaks MSE HTML5 video (including YouTube)

RESOLVED FIXED

Status

()

Core
Audio/Video
P1
normal
RESOLVED FIXED
2 years ago
2 years ago

People

(Reporter: cpeterson, Unassigned)

Tracking

(Blocks: 3 bugs)

unspecified
x86
Mac OS X
Points:
---
Dependency tree / graph

Firefox Tracking Flags

(firefox37 affected, firefox38- affected, firefox39- affected, firefox40- affected)

Details

(Reporter)

Description

2 years ago
People report that YouTube HTML5 video using MSE will work if you change your NoScript settings to allow 'mediasource:'.

Comment 1

2 years ago
I'm aware of this issue, already evaluated the security implications and decided to handle mediasource: exactly the same as blob:, i.e. whitelisting it by default.
It's gonna be the default in next release, due in a couple of days.
(Reporter)

Comment 2

2 years ago
Thanks, Giorgio!

This problem actually breaks any website playing HTML5 video with MSE, not just YouTube.
Blocks: 1032660, 1015800
Priority: -- → P1
Summary: NoScript blocks "mediasource:" which breaks YouTube HTML5 video using MSE → NoScript blocks "mediasource:" content which breaks MSE HTML5 video (including YouTube)

Comment 3

2 years ago
(In reply to Chris Peterson [:cpeterson] from comment #2)
> Thanks, Giorgio!
> 
> This problem actually breaks any website playing HTML5 video with MSE, not
> just YouTube.

Does the "media.mediasource.youtubeonly" preference being set to true mean that it's still a YouTube-only problem on Firefox 37 at least?

Comment 4

2 years ago
Could you please check whether 2.6.9.21rc1 does what's intended to do (i.e. fixes this issue)?
https://noscript.net/getit#devel

Thanks!
Flags: needinfo?(cpeterson)
(Reporter)

Comment 5

2 years ago
(In reply to Giorgio Maone from comment #3)
> Does the "media.mediasource.youtubeonly" preference being set to true mean
> that it's still a YouTube-only problem on Firefox 37 at least?

This is not a YouTube-only problem. The "media.mediasource.youtubeonly" has been renamed to "media.mediasource.whitelist" and the current list of MSE-allowed domains is here:

https://mxr.mozilla.org/mozilla-central/source/dom/media/mediasource/MediaSource.cpp#376

(In reply to Giorgio Maone from comment #4)
> Could you please check whether 2.6.9.21rc1 does what's intended to do (i.e.
> fixes this issue)?
> https://noscript.net/getit#devel

With dev build 2.6.9.21rc1, YouTube HTML5 video plays correctly! I can reproduce the problem with NoScript stable version 2.6.9.20, but I have to manually set my Flash plugin to "Never Activate" and opt into YouTube HTML5 (https://www.youtube.com/html5) because YouTube is temporarily defaulting all Firefox versions and platforms to Flash video.
Flags: needinfo?(cpeterson)
(Reporter)

Comment 6

2 years ago
Anthony will test whether NoScript blocks EME.
Flags: needinfo?(ajones)
This site is blocked http://people.mozilla.org/~cpearce/mse-clearkey/ but I'm guessing that is what is intended.
Flags: needinfo?(ajones)
Tracking as this impacts MSE and is one of the bugs that caused us to revert to Flash for 37.
tracking-firefox37: --- → ?
tracking-firefox38: --- → +
tracking-firefox39: --- → +
tracking-firefox40: --- → +
(Reporter)

Comment 9

2 years ago
NoScript version 2.6.9.21 with the mediasource fix is live on AMO so we no longer need to track this issue.

https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/?page=1#version-2.6.9.21
Status: NEW → RESOLVED
Last Resolved: 2 years ago
tracking-firefox37: ? → ---
Resolution: --- → FIXED
cf comment #9
tracking-firefox38: + → -
tracking-firefox39: + → -
tracking-firefox40: + → -
(Reporter)

Updated

2 years ago
Blocks: 1175296
You need to log in before you can comment on or make changes to this bug.