Unknown plug-ins should default to click-to-play state

RESOLVED INCOMPLETE

Status

()

Core
Plug-ins
--
enhancement
RESOLVED INCOMPLETE
8 years ago
a year ago

People

(Reporter: limi, Unassigned)

Tracking

Trunk
Points:
---

Firefox Tracking Flags

(Not tracked)

Details

(Whiteboard: [CtPDefault:P2])

If an installer or a web site installs a new plug-in in your browser that we don't already know about, the default behavior when we encounter it should be opt-in — i.e. something like this:

 Click to activate EvilPlugin content]

 [ ] Always activate EvilPlugin content

File under: "basic decency on the internet" ;)
Depends on: 711552
No longer depends on: 711552
How will we maintain the list of plugins that we "know about"?

I think it may be the case that this list needs to be locale-specific or localizable, especially for China and Korea, because Chinese and Korean sites use (site-specific) plugins much more commonly than other sites.
Tracking this in the CtPDefault list. This should get resolved by the current click-to-play plans, with only a core set of plugins being excepted from it.
Whiteboard: [CtPDefault:P2]

Comment 3

a year ago
Resolving old bugs which are likely not relevant any more, since NPAPI plugins are deprecated.
Status: NEW → RESOLVED
Last Resolved: a year ago
Resolution: --- → INCOMPLETE
You need to log in before you can comment on or make changes to this bug.