990069 - request to whitelist Click-To-Activate for Lync Web App plugin

Status: RESOLVED FIXED

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

Description

[Marco Bottaro]

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: Microsoft Lync Web App Plug-in

Vendor: Microsoft

Point of contact: Marco Bottaro ([e-mail])

Current version: 
== Windows versions ==
5.8
== Mac versions ==
15.8

Download URL: 
== Windows versions ==
https://lync12.lyncweb.microsoft.com//lwa/Plugins/LWAPlugin64BitInstaller32.msi
== Mac versions ==
https://lync12.lyncweb.microsoft.com//lwa/Plugins/LWAPluginInstaller.pkg

Sample URL of plugin in use:
dynamically generated URL per meeting, crf. http://office.microsoft.com/en-us/lync/

Plugin details:

<<For each affected operating system, please copy the plugin information from about:plugins in Firefox>>
== Windows versions ==
Microsoft Lync Web App Plug-in

    File: npMeetingJoinPluginOC.dll
    Path: C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll
    Version: 15.0.4545.1000
    State: Enabled
    The plugin allows you to have a better experience with Microsoft Lync

MIME Type	Description	Suffixes
application/vnd.microsoft.communicator.ocsmeeting	Lync Plug-in for Firefox
== Mac versions ==
Microsoft Lync Web App Plug-in

    File: LWAPlugin15.8.bundle
    Path: /Users/marco/Library/Internet Plug-Ins/LWAPlugin15.8.bundle
    Version: 1.0
    State: Enabled
    15.8.0.0

MIME Type	Description	Suffixes
application/x-lwa-nativeplugin15.8	Microsoft Lync Web App Plug-in

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next?
file names: version number;
MIME types: yes, foreseen;
version: yes.

Are there any known security issues in current or older versions of the plugin?
no. we access the network, hardware and operating system API.

Comment 1

[Benjamin Smedberg]

Builds for testing are now available at http://people.mozilla.org/~bsmedberg/plugin-whitelisting-91f6f3380041/

Please do a QA pass using a new Firefox profile to ensure that the plugin activates without a popup and appears as "Always Activate" in the addon manager. Report back in this bug when QA is complete. Please try to complete QA by the end of this week.

Comment 2

[mbotta]

we have found that firefox does not whitelist the lync web app plugin public or internal versions.

both public and internal lwap versions
======================================
- mac osx 10.6-10.9, winxp: failed; plugin is not detected, prompts to install plugin every time when user starts a call, appears as "Always Activate" in the add-on manager
- win vista - 8.1: failed; plugin is not detected, is prompted to install plugin every time when user starts a call, plugin appears as "Ask to Activate" in the add-on manager

Comment 3

[mbotta]

please disregard previous comment.

we have found that firefox does not whitelist the lync web app plugin public or internal versions.

both public and internal lwap versions
======================================
- mac osx 10.6-10.9: failed; plugin is not detected, prompts to install plugin every time when user starts a call, appears as "Always Activate" in the add-on manager
- win xp - 8.1: failed; plugin is not detected, is prompted to install plugin every time when user starts a call, plugin appears as "Ask to Activate" in the add-on manager

Comment 4

[Benjamin Smedberg]

> - mac osx 10.6-10.9: failed; plugin is not detected, prompts to install plugin every time when user
> starts a call, appears as "Always Activate" in the add-on manager

This indicates to me that the problem is likely on the website, not the client. Note that these builds include an unrelated change which prevents enumerating navigator.plugins. If your sites are currently detecting the presence of a plugin using navigator.plugins, you should instead use navigator.mimeTypes[myMimeType] to detect whether your plugin is installed. See bug 757726 and https://developer.mozilla.org/en-US/docs/Web/API/NavigatorPlugins.plugins

Comment 5

[Chris Peterson [:cpeterson]]

Marco: if you are not able to change these websites to fix their plugin detection of the Lync plugin, please comment in bug 990808 or just email me. We can add the Lync plugin to our plugin detection whitelist (bug 990808), which is unrelated to the plugin click-to-play whitelist.

Comment 6

[Benjamin Smedberg]

Fixed for Firefox 30 beta 1 in bug 992995. Marco I believe we're good with verification but can you confirm?