761840 - Firefox with click_to_play should let me always allow/block plugins for a whole domain

Status: RESOLVED INCOMPLETE

(Core Graveyard :: Plug-ins, enhancement)

Description

[Ronan Jouchet]

Attachment: Always allow/block plugins by domain mockup proposal

*Description*
Currently, with plugins.click_to_play=true, I can instruct Firefox to always allow plugins like Flash on a site (http://abc.com). Unfortunately, the feature is restricted to that subdomain, and I cannot always allow plugins on the whole domain (http://*.abc.com).

*Use case & rationale*
1. I visit http://rien.bandcamp.com (great music!), and tell Firefox to always allow Flash
2. Later on, I visit http://manmachine.bandcamp.com (great music too!), but again I have to activate Flash here.
3. Etc.
My point is that some domains (e.g. music/video sites like bandcamp.com, soundcloud.com, etc.) still use Flash on all their subdomains. It's a pain to have to enable it for each individual page, even though I know I trust bandcamp.com and know I want Flash on all bandcamp.com sites.
It has obvious security drawbacks, but since the feature is already geeky and not-so-discoverable, we can probably expect the user knows what a domain is, and what the consequences of a domain-wide exception are.

*Notes*
- FlashBlock support whitelisting by domain. So to a FlashBlock users eyes, that's a functional regression.
- Quick UI mockup attached.

Thanks for the work

Comment 1

[Hugh]

I would like fine grained control.

Just because I allow http://rien.bandcamp.com does not mean I automatically want to allow http://manmachine.bandcamp.com though I admit that there will be time when I want to.

What I propose is

Allow on bandcamp.com
Allow on http://manmachine.bandcamp.com

Much like what Adblcok Plus allows me to do with filters.

Don't tie the users hands!

Comment 2

[scientes]

@hugh, using the existing permissions model (favicon left of url-->more info-->permissions) would take care of the use case you explained. CSLite for example exposes this model.

Comment 3

[Benjamin Smedberg]

Resolving old bugs which are likely not relevant any more, since NPAPI plugins are deprecated.