981403 - plugin whitelist request: Cisco VGConnect for directv.com

Status: VERIFIED FIXED

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

Description

[Yaron Pass]

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: VGConnect
Vendor: Cisco Systems Inc.
Point of contact: Yaron Pass ([e-mail])
Current version: 9.2
Download URL: 
https://support.directv.com/app/answers/detail/a_id/3679/~/what-is-the-directv-player-and-how-do-i-install-it-on-my-computer%3F

Sample URL of plugin in use: http://www.directv.com/movies-online?ACM=false&lpos=Header:3

Plugin details:
The VGConnect browser plugin is a secure player used to protect premium video content.
The plugin is customized per video provider (e.g. on DIRECTV.com it is called “DIRECTV Player”)

<<For each affected operating system, please copy the plugin information from about:plugins in Firefox>>

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?
Yes. The plugin is customized per video provider (e.g. on DIRECTV.com it is called “DIRECTV Player”)
Version numbers is also controlled per provider.

Are there any known security issues in current or older versions of the plugin?
no.

Comment 1

[Benjamin Smedberg]

The Firefox plugin whitelist operates on plugin file names. So in this case where you have a separate plugin for each site, it is necessary to file a separate bug for each version of the plugin that uses a different file name.

Comment 2

[Yaron Pass]

please add "DIRECTV Player" for now.
see specific installation and usage links above.
thanks.

Comment 3

[Benjamin Smedberg]

Please provide the specific details needed about that version of the plugin, including all of the about:plugins data from both the Windows and Mac version of the plugin.

Also please provide details about your transition plan away from plugins. You can do that publicly here in the bug or by private mail to [e-mail]

Comment 4

[Yaron Pass]

about:plugins info for Windows:
------------------------------

DIRECTV Player
File: npPlayerPlugin.dll
Path: C:\Users\<username>\AppData\Local\DIRECTV Player\npPlayerPlugin.dll
Version: 1.0.0.1
DIRECTV Player Plugin
MIME Type : application/x-vgconnect-player
Description : DIRECTV Player	

about:plugins info for Mac (current version):
--------------------------------------------

DIRECTV Player
File: PlayerPlugin.bundle
Path: /Users/<username>/Library/Internet Plug-Ins/PlayerPlugin.bundle
Version: 9.2
DIRECTV Player Plugin
MIME Type : application/x-vgconnect-player
Description : DIRECTV Player Plugin	


about:plugins info for Mac (next version):
------------------------------------------

DIRECTV Player
File: PlayerPlugin.bundle
Path: /Users/<username>/Library/Internet Plug-Ins/PlayerPlugin.bundle
Version: 10.0
DIRECTV Player Plugin
MIME Type : application/x-vgconnect-player
Description : DIRECTV Player Plugin	


Question:
Since whitelist operates on plugin file name, do we need to whitelist each version separately ?
Does whitelist take into account installed path or plugin description ?

Comment 5

[Benjamin Smedberg]

It doesn't operate on the entire path, just the leaf name.

Comment 6

[Yaron Pass]

Will we need to whitelist each version separately if the leaf name stays the same ?

Comment 7

[Benjamin Smedberg]

Builds for testing are now available at http://people.mozilla.org/~bsmedberg/plugin-whitelisting-91f6f3380041/

Please do a QA pass using a new Firefox profile to ensure that the plugin activates without a popup and appears as "Always Activate" in the addon manager. Report back in this bug when QA is complete. Please try to complete QA by the end of this week.

Comment 8

[Benjamin Smedberg]

Fixed for Firefox 30 beta in bug 992995. No word yet from Cisco on QA verification... Yaron?

Comment 9

[Yaron Pass]

QA verification passed. Confirmed to be working.

Comment 10

[Benjamin Smedberg]

Great, thanks.