Open Bug 665395 Opened 9 years ago Updated Last year

there should be a pref to completely disable media including disable Audio API extension (window.Audio object)

Categories

(Core :: Audio/Video: Playback, defect, P3)

x86
Windows XP
defect

Tracking

()

People

(Reporter: al_9x, Unassigned)

References

Details

User-Agent:       Mozilla/5.0 (Windows NT 5.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: 

a) to avoid potentially surprising, annoying and unwelcome audio
b) for security hardening purposes, most serious vulnerabilities are JS + API, so it should be possible to disable non core APIs one doesn't need.

Reproducible: Always
So what is this bug about?
window.Audio is the constructor for audio element, which is part of the
HTML spec.

Is this bug about disabling the moz-prefixed methods in the Audio element or
about disabling Audio altogether?
(In reply to comment #1)
> So what is this bug about?

This intent is letting the user control whether his browser gets to play unsolicited audio from arbitrary websites.  A first step in this effort should be a global switch to disable audio output.  Per site permissions can come later.

This should be accomplished by denying access to the API (as opposed to setting the volume really low), which as an added bonus gives you enhanced security.

> Is this bug about disabling the moz-prefixed methods in the Audio element or
> about disabling Audio altogether?

I did notice the media.*.enabled prefs which presumably can block media playback through audio/video DOM elements, but they don't apply to the extension.

It probably makes sense for the global switch I am proposing to affect all media, so something like: media.enabled, which will completely disable <audio> <video> elements/objects.  Should this bug be repurposed for that, or a different one created?
Bug 665598
Summary: there should be a pref to disable Audio API extension (window.Audio object) → there should be a pref to completely disable media including disable Audio API extension (window.Audio object)
Assignee: nobody → chris
Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true
Depends on: 736400
Assignee: cade → nobody
Component: Audio/Video → Audio/Video: Playback
Status: ASSIGNED → NEW
Rank: 29
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.