990286 - Request to whitelist Vidyo's VidyoWeb plugin

Status: VERIFIED FIXED

(Firefox Graveyard :: Plugin Click-To-Activate Whitelist, defect)

Description

[Mishel Alon]

<<Please supply the following information for new plugin whitelist requests>>

Plugin name: VidyoWeb plugin (developed on Firebreath famework - http://www.firebreath.org/display/documentation/FireBreath+Home) 
Vendor: Vidyo, Inc.
Point of contact: Mishel Alon
Current version: 1.0.1 (53)
Download URL: https://filetransfer.vidyo.com/message/ZbNxGHQJO8FegakPUg7aMH
Sample URL of plugin in use:  https://main.vidyo.com/web/index.html?loginType=guest&portalUri=https://main.vidyo.com&roomKey=WwF3ehk5ia18&id=843055016210837#/login

Plugin details:

<<For each affected operating system, please copy the plugin information from about:plugins in Firefox>>
VidyoWeb

    File: npVidyoWeb-00053.plugin,npVidyoWeb-00051.plugin,npVidyoWeb-00048.plugin,VidyoWeb.plugin
    Path: /Users/malon/Library/Internet Plug-Ins/npVidyoWeb-00053.plugin,/Users/malon/Library/Internet Plug-Ins/npVidyoWeb-00051.plugin,/Users/malon/Library/Internet Plug-Ins/npVidyoWeb-00048.plugin,/Library/Internet Plug-Ins/VidyoWeb.plugin
    Version: VidyoWeb 1.0.1.00053
    State: Enabled
    Vidyo Web Plugin

Are there any variations in the plugin file name, MIME types, description, or version from one release to the next? The file name and MIME types, description changes from one plugin version to another (with the updated version information). Recent examples:
application/x-vidyoweb-1.0.1.00053	Vidyo Web Plugin	
application/x-vidyoweb-1.0.0.00051	Vidyo Web Plugin	
application/x-vidyoweb-1.0.0.00048	Vidyo Web Plugin	
application/x-vidyoweb-1.0.0.99999	Vidyo Web Plugin

Are there any known security issues in current or older versions of the plugin?
No.

Additional information:
Vidyo is currently developing a WebRTC-based VidyoWeb solution that will eliminate VidyoWeb’s dependency on NPAPI-based plugin. We already have a alpha-level prototype that could be demonstrated. We would like to make this solution available so FireFox users have a continuous Vidyo solution.

Comment 1

[Benjamin Smedberg]

Mishel, I just want to confirm that this request is for a mac plugin only?

Comment 2

[Mishel Alon]

Benjamin, it's also on Windows. Here is the information from the Windows plug-ins info page:
File: npVidyoWeb.dll, npVidyoWeb.dll, npVidyoWeb.dll, npVidyoWeb.dll, npVidyoWeb.dll, npVidyoWeb.dll

MIME types:
application/x-vidyoweb-1.0.1.00053 (VidyoWeb),
application/x-vidyoweb-1.0.0.00039 (VidyoWeb),
application/x-vidyoweb-1.0.0.00038 (VidyoWeb),
application/x-vidyoweb-1.0.0.00036 (VidyoWeb),
application/x-vidyoweb-1.0.0.00032 (VidyoWeb),
application/x-vidyoweb-1.0.0.00028 (VidyoWeb)

Please let me know if there is any additional information that I should provide.
Thanks so much! This is much appreciated!

Comment 3

[Benjamin Smedberg]

Builds for testing are now available at http://people.mozilla.org/~bsmedberg/plugin-whitelisting-91f6f3380041/

Please do a QA pass using a new Firefox profile to ensure that the plugin activates without a popup and appears as "Always Activate" in the addon manager. Report back in this bug when QA is complete. Please try to complete QA by the end of this week.

Comment 4

[Mishel Alon]

QA are currently testing it and should be done by the end of this week.
In the meantime, I was asked to add links to the plugin versions that have the Heartbleed bug fix, so here they are:

Mac-
https://www.dropbox.com/s/fjfisartm7jmjeg/VidyoWeb-macosx-00057.pkg

Windows-
https://www.dropbox.com/s/u9fnss7tx0t96vh/VidyoWeb-win32-1.0.2.00057.msi

Comment 5

[Mishel Alon]

We are able to join call using the new Firefox beta build but after we join the call we see a windows firewall warning message (attached). Is this expected?

Comment 6

[Mishel Alon]

Attachment: FirefoxBeta.png

Comment 7

[Benjamin Smedberg]

This change doesn't affect that. If your plugin is making direct network connections (not using NPAPI networking) then the default firewall settings probably apply.

Comment 8

[Mishel Alon]

Our QA performed several tests both on Windows and Mac and everything seems to be working well with Nightly 31.0a1.

Comment 9

[Benjamin Smedberg]

Fixed for Firefox 30 beta 1 in bug 992995.