Closed Bug 981403 Opened 10 years ago Closed 10 years ago

plugin whitelist request: Cisco VGConnect for directv.com

Categories

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

defect
Not set
normal

Tracking

(Not tracked)

VERIFIED FIXED
Firefox 30

People

(Reporter: ypass, Assigned: benjamin)

Details

(Whiteboard: application complete - accepted)

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: VGConnect
Vendor: Cisco Systems Inc.
Point of contact: Yaron Pass (ypass@cisco.com)
Current version: 9.2
Download URL: 
https://support.directv.com/app/answers/detail/a_id/3679/~/what-is-the-directv-player-and-how-do-i-install-it-on-my-computer%3F

Sample URL of plugin in use: http://www.directv.com/movies-online?ACM=false&lpos=Header:3

Plugin details:
The VGConnect browser plugin is a secure player used to protect premium video content.
The plugin is customized per video provider (e.g. on DIRECTV.com it is called “DIRECTV Player”)

<<For each affected operating system, please copy the plugin information from about:plugins in Firefox>>

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?
Yes. The plugin is customized per video provider (e.g. on DIRECTV.com it is called “DIRECTV Player”)
Version numbers is also controlled per provider.

Are there any known security issues in current or older versions of the plugin?
no.
Summary: plugin whitelist request → plugin whitelist request: Cisco VGConnect
The Firefox plugin whitelist operates on plugin file names. So in this case where you have a separate plugin for each site, it is necessary to file a separate bug for each version of the plugin that uses a different file name.
please add "DIRECTV Player" for now.
see specific installation and usage links above.
thanks.
Please provide the specific details needed about that version of the plugin, including all of the about:plugins data from both the Windows and Mac version of the plugin.

Also please provide details about your transition plan away from plugins. You can do that publicly here in the bug or by private mail to pluginwhitelist@mozilla.com
Flags: needinfo?(ypass)
Summary: plugin whitelist request: Cisco VGConnect → plugin whitelist request: Cisco VGConnect for directv.com
about:plugins info for Windows:
------------------------------

DIRECTV Player
File: npPlayerPlugin.dll
Path: C:\Users\<username>\AppData\Local\DIRECTV Player\npPlayerPlugin.dll
Version: 1.0.0.1
DIRECTV Player Plugin
MIME Type : application/x-vgconnect-player
Description : DIRECTV Player	

about:plugins info for Mac (current version):
--------------------------------------------

DIRECTV Player
File: PlayerPlugin.bundle
Path: /Users/<username>/Library/Internet Plug-Ins/PlayerPlugin.bundle
Version: 9.2
DIRECTV Player Plugin
MIME Type : application/x-vgconnect-player
Description : DIRECTV Player Plugin	


about:plugins info for Mac (next version):
------------------------------------------

DIRECTV Player
File: PlayerPlugin.bundle
Path: /Users/<username>/Library/Internet Plug-Ins/PlayerPlugin.bundle
Version: 10.0
DIRECTV Player Plugin
MIME Type : application/x-vgconnect-player
Description : DIRECTV Player Plugin	


Question:
Since whitelist operates on plugin file name, do we need to whitelist each version separately ?
Does whitelist take into account installed path or plugin description ?
Flags: needinfo?(ypass)
It doesn't operate on the entire path, just the leaf name.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Whiteboard: application complete
Will we need to whitelist each version separately if the leaf name stays the same ?
Whiteboard: application complete → application complete - accepted
Builds for testing are now available at http://people.mozilla.org/~bsmedberg/plugin-whitelisting-91f6f3380041/

Please do a QA pass using a new Firefox profile to ensure that the plugin activates without a popup and appears as "Always Activate" in the addon manager. Report back in this bug when QA is complete. Please try to complete QA by the end of this week.
Flags: needinfo?(ypass)
Fixed for Firefox 30 beta in bug 992995. No word yet from Cisco on QA verification... Yaron?
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
Target Milestone: --- → Firefox 30
QA verification passed. Confirmed to be working.
Flags: needinfo?(ypass)
Great, thanks.
Status: RESOLVED → VERIFIED
Product: Firefox → Firefox Graveyard
You need to log in before you can comment on or make changes to this bug.