882304 - Plugincheck should show the version suggested, not just a link to a vendor site

Status: RESOLVED INCOMPLETE

(Plugin Check Graveyard :: UI, enhancement)

Description

[Jakob Bohm]

User Agent: Mozilla/5.0 (Windows NT 5.2; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0 (Beta/Release)
Build ID: 20130511120803

Steps to reproduce:

Accidentally install a very very slightly outdated flash plugin (11.7.700.202), then visit the plugincheck site (via the convenience link inside Fx Add-On manager)


Actual results:

It told me it was outdated, which looked strange as I had just installed the latest build, and the only explanation given was a link to the crapware-infested looser "get flash" page at adobe.  I had to do several manual checks to find out what was wrong.

To add to the bad information, the first column described the installed version as "11.7 r700", a truncated version number matching both the vulnerable 11.7.700.202 and the not vulnerable 11.7.700.224.


Expected results:

There should have been a column showing the version plugincheck thinks is the minimum safe version, as this data is most obviously available in the backend code.

Also, truncated version numbers in the "description" of some plugins (such as Flash) should be filtered out, so it is not confused with the detected version number shown in the other column.

Comment 1

[Carsten Book [:Tomcat]]

adding espressive here, not sure how much work this would be.

Comment 2

[Schalk Neethling [:espressive]]

This all really depends on the information exposed by the browser and also the information in the database, the first of which we are not in control off. With that said however, this is worthwhile investigating.

Comment 3

[Jakob Bohm]

Note: All information mentioned in the bugreport is either:

- Information actually used by the plugincheck code to make its decision (if it didn't see the non-truncated version numbers, it would not have produced an upgrade suggestion based on them).

- Information that should be in the database (a more specific download link than the vendors welcome page, especially when that welcome page is as bad as the Adobe GetFlash page was back in Mid 2013 when I filed the report).

Comment 4

[u597032]

PluginCheck is no longer supported