Flash Player can start from local filesystem in Version 55.0.3

NEW
Unassigned

Status

()

Core
Plug-ins
P3
normal
9 months ago
8 months ago

People

(Reporter: Philipp, Unassigned)

Tracking

55 Branch
Points:
---

Firefox Tracking Flags

(firefox55 affected, firefox56 affected, firefox57 affected)

Details

(Whiteboard: sb+)

(Reporter)

Description

9 months ago
User Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Build ID: 20170824053622

Steps to reproduce:

When i try to load a html with a swf file from the Native File system 
( like this : file:///P:/FLASHWORKSPACE/TestFlashProject/bin-debug/TestFlashProject.html )
The Mozilla does not found the Flash Player Plug in.



Actual results:

The Firefox does not found the Flash Player Plugin and promt like it is not installed.


Expected results:

The SWF should be played like it does under a http request.
The issue is only with 55.0.3 on several machines.
(Reporter)

Updated

9 months ago
Summary: Flash Player can not startet vom Nativ Filesystem in Version 55.0.3 → Flash Player can not startet from Nativ Filesystem in Version 55.0.3

Updated

9 months ago
Whiteboard: sb?
(Reporter)

Comment 1

9 months ago
What means sb ?

Updated

9 months ago
Flags: needinfo?(twalker)
(Reporter)

Comment 2

9 months ago
Okay,

Download this file:
https://dtm-software.de/data/bin-debug.zip

Unzip it on your HDD

Then open the POSTCHECK.html with Firefox.

The Browser now show´s there is no flash player installed. https://dtm-software.de/data/loadingfailed.jpg 

This is not correct!
Because if you open it with http like this https://dtm-software.de/data/bin-debug/POSTCHECK.html everything is okay.

Comment 3

8 months ago
Philipp, thank you for the test file and STR's. 

I can reproduce on macOS 10.12.5 With latest Nightly 57.0a1, 20170914 with Shockwave Flash Player 27.0.0.130 installed.
Status: UNCONFIRMED → NEW
status-firefox55: --- → affected
status-firefox56: --- → affected
status-firefox57: --- → affected
Ever confirmed: true
Flags: needinfo?(twalker)

Updated

8 months ago
Summary: Flash Player can not startet from Nativ Filesystem in Version 55.0.3 → Flash Player can start from Nativ Filesystem in Version 55.0.3

Updated

8 months ago
Summary: Flash Player can start from Nativ Filesystem in Version 55.0.3 → Flash Player can start from local filesystem in Version 55.0.3

Updated

8 months ago
Priority: -- → P3
Whiteboard: sb? → sb+
Revisiting this, I now recall that this needs a setting in order to work.  Philipp, can you try setting plugins.http_https_only to false in about:config and let me know if that fixes the issue for you?
Flags: needinfo?(pm)

Comment 5

8 months ago
setting plugins.http_https_only to false gets me past the message "To view this page ensure that Adobe Flash Player version 11.1.0 or greater is installed."  Then click to activate adobe flash to play the video, but only a white page is displayed at file:///bin-debug/POSTCHECK.html
I see what Tracy is seeing but I'm hoping that it doesn't have anything to do with us.  I note that the example plugin Adobe gave us in bug 1388903 works -- it draws text as expected.  Maybe Philipp knows what is going on there.
(Reporter)

Comment 7

8 months ago
hey,

the about:config -> plugins.http_https_only setting fixes a part of the Problem.
The Flash Player now load´s but promt an Error.

SecurityError: Error #2148: SWF file file:///C:/Users/admin/Desktop/bin-debug/POSTCHECK.swf cannot access local resource file:///C:/Users/admin/Desktop/bin-debug/framework_4.6.0.23201.swf. Only local-with-filesystem and trusted local SWF files may access local resources.
	at flash.net::URLStream/load()
	at flash.net::URLLoader/load()
	at mx.core::CrossDomainRSLItem/load()[E:\dev\4.y\frameworks\projects\framework\src\mx\core\CrossDomainRSLItem.as:227]
	at mx.core::RSLListLoader/loadNext()[E:\dev\4.y\frameworks\projects\framework\src\mx\core\RSLListLoader.as:184]
	at mx.core::RSLListLoader/load()[E:\dev\4.y\frameworks\projects\framework\src\mx\core\RSLListLoader.as:156]
	at mx.preloaders::Preloader/initialize()[E:\dev\4.y\frameworks\projects\framework\src\mx\preloaders\Preloader.as:297]
	at mx.managers::SystemManager/http://www.adobe.com/2006/flex/mx/internal::initialize()[E:\dev\4.y\frameworks\projects\framework\src\mx\managers\SystemManager.as:2097]
	at mx.managers::SystemManager/initHandler()[E:\dev\4.y\frameworks\projects\framework\src\mx\managers\SystemManager.as:2582]

Normally it should show a Text in the Middle "It Works" like it does here 
https://dtm-software.de/data/bin-debug/POSTCHECK.html

I think there is a second Problem.
Flags: needinfo?(pm)
That would be the sandbox blocking the file access in the plugin process.  Allowing access to the disk would be a security problem.  I assume the http version downloads the framework swf, which is, of course, allowed.  If you want the swf to be able to use the file system then you need to disable the sandbox.  You can try running the browser with the environment variable MOZ_DISABLE_NPAPI_SANDBOX=1 to turn it off (you cant do that with an about:config setting alone).
(Also, the framework swf wasnt in the downloaded zip.)

Let me know if turning off the sandbox fixes your issue.
Flags: needinfo?(pm)
(Reporter)

Comment 9

8 months ago
(In reply to David Parks (dparks) [:handyman] from comment #8)
> That would be the sandbox blocking the file access in the plugin process. 
> Allowing access to the disk would be a security problem.  I assume the http
> version downloads the framework swf, which is, of course, allowed.  If you
> want the swf to be able to use the file system then you need to disable the
> sandbox.  You can try running the browser with the environment variable
> MOZ_DISABLE_NPAPI_SANDBOX=1 to turn it off (you cant do that with an
> about:config setting alone).
> (Also, the framework swf wasnt in the downloaded zip.)
> 
> Let me know if turning off the sandbox fixes your issue.

Okay, i have done the enviroment var but it haven´t helped.
I have also set my "C" Drive to a trusted storage place.

And the framework_4.6.0.23201.swf is in the zip !
Flags: needinfo?(pm)
You need to log in before you can comment on or make changes to this bug.