987650 - request to whitelist Click-To-Activate for Skype, Facebook and Lync plugins

Status: RESOLVED INVALID

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

Description

[mbotta]

For each of the plugins listed below, instead of using NPAPI, we want to use the Firefox js-ctypes library to bridge between Firefox and the native code. To be able to do that, we will implementa Firefox extension, with which we want to distribute the plugin. The extension will likely be distributed from the Firefox Extension Store.

Until that time, we request whitelisting Click-To-Activate the plugins listed below.

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: 
1) Skype Web Plug-in
2) Facebook Video Calling Plug-in
3) Microsoft Lync Web App Plug-in
Vendor: Microsoft
Point of contact: Marco Bottaro ([e-mail])
Current version: 
== Windows versions ==
1) 2.9
2) 1.2.205.0
3) 15.8
== Mac versions ==
1) 2.9
2) 1.6
3) 15.8
Download URL: 
== Windows versions ==
1) https://az379195.vo.msecnd.net/public/download/win/SkypeWebPlugin-2.9.13008.18866.msi
2) https://www.facebook.com/chat/video/videocalldownload.php
3) https://lync12.lyncweb.microsoft.com//lwa/Plugins/LWAPlugin64BitInstaller32.msi
== Mac versions ==
1) https://rtccdn.blob.core.windows.net/public/download/mac/SkypeWebPlugin-2.9.13008.18866.pkg
2) https://www.facebook.com/chat/video/videocalldownload.php
3) https://lync12.lyncweb.microsoft.com//lwa/Plugins/LWAPluginInstaller.pkg
Sample URL of plugin in use:
1) http://office.com/
2) http://facebook.com/
3) dynamically generated URL per meeting, crf. http://office.microsoft.com/en-us/lync/

Plugin details:

<<For each affected operating system, please copy the plugin information from about:plugins in Firefox>>
== Windows versions ==
1) Skype Web Plugin

    File: npSkypeWebPlugin.dll
    Path: C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll
    Version: 2.9.13008.18866
    State: Enabled
    Skype Web Plugin

MIME Type Description Suffixes
application/skype-web-plugin
2) Facebook Video Calling Plugin

    File: npFacebookVideoCalling.dll
    Path: C:\Users\xxxx\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
    Version: 2.0.0.447
    State: Enabled
    Facebook Video Calling Plugin

MIME Type Description Suffixes
application/skypesdk-plugin
3)     File: npMeetingJoinPluginOC.dll
    Path: C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll
    Version: 15.0.4545.1000
    State: Enabled
    The plugin allows you to have a better experience with Microsoft Lync

MIME Type	Description	Suffixes
application/vnd.microsoft.communicator.ocsmeeting	Lync Plug-in for Firefox
== Mac versions ==
1) Skype Web Plugin - Version: 2.9.13008.18866
Name:	Skype Web Plugin
Version:	2.9.13008.18866
Location:	/Users/marco/Library/Internet Plug-Ins/SkypeWebPlugin.bundle
Type:	NPAPI
 	 Disable
MIME types:	
MIME type	Description	File extensions
application/skype-web-plugin	Skype Web Plugin	
2) Facebook Video Calling Plugin

    File: FacebookVideoCalling.webplugin
    Path: /Users/marco/Library/Application Support/Facebook/video/2.0.0.441/FacebookVideoCalling.webplugin
    Version: 2.0.0.441
    State: Enabled
    Facebook Video Calling by Skype

MIME Type	Description	Suffixes
application/skypesdk-plugin	Facebook Video Calling plugin provided by Skype
3) Microsoft Lync Web App Plug-in

    File: LWAPlugin15.8.bundle
    Path: /Users/marco/Library/Internet Plug-Ins/LWAPlugin15.8.bundle
    Version: 1.0
    State: Enabled
    15.8.0.0

MIME Type	Description	Suffixes
application/x-lwa-nativeplugin15.8	Microsoft Lync Web App Plug-in

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?
file names: version number;
MIME types: yes, foreseen;
version: yes.

Are there any known security issues in current or older versions of the plugin?
no. we access the network, hardware and operating system API.

Comment 1

[Benjamin Smedberg]

Please file a separate request for each plugin.

I am also going to need more details about your transition plan: for example I don't see how a Firefox extension will help you provide "native" video calling in the browser. You can provide those details either publicly in the bug or by private email to [e-mail]