988152 - Request for adding IBM Notes Browser Plug-in to the NPAPI Plug-in whitelist

Status: RESOLVED WONTFIX

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

Description

[Raj Patil]

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: IBM Notes Browser Plug-in Extension
Vendor: IBM
Point of contact: Rajesh Patil ([e-mail])
Current version: 9.0.11.14079
Download URL: There's no public download that we support.  This is for IBM Customers who have paid for IBM Notes/Domino.
Sample URL of plugin in use:  notes:home  (adds support for notes: handling within the browser)

Plugin details:

This Plug-in is for all the Windows Platforms Only.  IBM has a Collaboration Product Suite called IBM Notes (client) & IBM Domino (server).  This plug-in encapsulates IBM Notes Client inside the Mozilla Firefox browser and shows Notes Content within the browser, using NPAPI.  We have added support for notes: URL handler.  

Notes embedded control plugin for Mozilla

    File: npntapi.dll
    Path: C:\Program Files (x86)\IBM\Notes\mozilla\plugins\npntapi.dll
    Version: 9.0.11.14079
    State: Enabled
    Notes embedded control plugin for Mozilla

MIME Type	Description	Suffixes
application/x-notes-control	Notes embedded control

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?

-- The plug-in filename remains the same across various versions.  The version number might change, for example in 9.0.2 release, it would go to 9.0.2n.nnnnn.  No changes in MIME types.  Description might change. There is a possibility of the NAME of the plug-in changing in case the product is re-branded but the filename remains the same.  

Are there any known security issues in current or older versions of the plugin?

-- The plug-in is just a wrapper for Core IBM Notes content, which has it's own security mechanism to communicate with Domino Server.  The plug-in as such does not provide any authentication, so does not have any security components nor would have any security issues.  User cannot open Notes content unless they authenticate with the underlying Notes security.

Comment 1

[Benjamin Smedberg]

Please provide details about your transition plan away from the plugin to use HTML5 technologies. You can put it here in the bug or send private email to [e-mail].

Comment 2

[Benjamin Smedberg]

Without a transition plan, this application cannot move forward. Please reopen or email [e-mail] if you're still hoping to be considered for the whitelist.