827859 - Flash Player is not CTP blocked in FF 18

Status: VERIFIED INVALID

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Paul Silaghi, QA [:pauly]]

I tested couple of outdated Flash version in FF 18 RC: Flash 10.1.85.3, 10.2.159.1 and 11.2.202.235
It seems Flash is not CTP blocked.

Jorge, can you please take a look on this ?

Comment 1

[u279076]

I believe that Flash 10.2 and lower should be CTP blocked on Firefox 18. In other words:
* Flash 10.1.85.3 should be CTP blocked
* Flash 10.2.159.1 should be CTP blocked
* Flash 11.2.202.235 should NOT be CTP blocked

Jorge, can you please confirm this should be the case?

Comment 2

[u279076]

Paul, can you please attach a copy of the blocklist.xml file from your profile to confirm it's been updated correctly?

Comment 3

[Paul Silaghi, QA [:pauly]]

Attachment: blocklist.xml after making the force ping

Comment 4

[u279076]

(In reply to Paul Silaghi [QA] from comment #3)
> Created attachment 699243 [details]
> blocklist.xml after making the force ping

I see the following entries for Flash:

<pluginItem blockID="p160">
  <match name="filename" exp="NPSWF32\.dll"/>
  <versionRange minVersion="0" maxVersion="10.2.9999" severity="0" vulnerabilitystatus="1">
    <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
      <versionRange minVersion="4.0" maxVersion="16.*"/>
    </targetApplication></versionRange>
</pluginItem>
<pluginItem blockID="p176">
  <match name="filename" exp="(NPSWF32\.dll)|(Flash\ Player\.plugin)"/>
  <versionRange minVersion="0" maxVersion="10.3.183.18.999" severity="0" vulnerabilitystatus="1">
    <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
      <versionRange minVersion="19.0a1" maxVersion="*"/>
    </targetApplication>
  </versionRange>
</pluginItem>
<pluginItem blockID="p178">
  <match name="filename" exp="(NPSWF[0-9_]*\.dll)|(Flash\ Player\.plugin)"/>
  <versionRange minVersion="11.0" maxVersion="11.4.402.286.999" severity="0" vulnerabilitystatus="1">
    <targetApplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
      <versionRange minVersion="19.0a1" maxVersion="*"/>
    </targetApplication></versionRange>
</pluginItem>

Comment 5

[Jorge Villalobos [:jorgev] (he/him)]

This is correct. See bug 823264 and https://etherpad.mozilla.org/plugin-blocks

Comment 6

[u279076]

Thanks for clarifying Jorge.