Firefox3.1/Video Security Review: Difference between revisions

m
replacing raw '<' with < to get the page to display -- did we change wiki software?
mNo edit summary
m (replacing raw '<' with < to get the page to display -- did we change wiki software?)
 
Line 61: Line 61:
== Data ==
== Data ==
* What data is read or parsed by this feature
* What data is read or parsed by this feature
<video>, <audio> and <source> are parsed in the HTML. Ogg contained files are read/parsed using the external libraries listed above.
&lt;video>, &lt;audio> and &lt;source> are parsed in the HTML. Ogg contained files are read/parsed using the external libraries listed above.


* What is the output of this feature
* What is the output of this feature
Line 81: Line 81:


* Are there build options for developers? [#ifdefs, ac_add_options, etc.]
* Are there build options for developers? [#ifdefs, ac_add_options, etc.]
#ifdef MOZ_MEDIA for enable <video> and <audio> support
#ifdef MOZ_MEDIA for enable &lt;video> and &lt;audio> support
#ifdef MOZ_OGG for Ogg backend
#ifdef MOZ_OGG for Ogg backend
--enable-ogg to enable ogg backend and media support
--enable-ogg to enable ogg backend and media support
Line 102: Line 102:
* Using Access-Control utils (under discussion) should already contain those checks, but we should test to be sure.
* Using Access-Control utils (under discussion) should already contain those checks, but we should test to be sure.
* There was some talk of a pref to override access-control checks, as a developer thing.
* There was some talk of a pref to override access-control checks, as a developer thing.
* <video> and <audio> need to check with defined nsIContentPolicy providers (we do, roc thinks; https://bugzilla.mozilla.org/show_bug.cgi?id=451004 says we don't)
* &lt;video> and &lt;audio> need to check with defined nsIContentPolicy providers (we do, roc thinks; https://bugzilla.mozilla.org/show_bug.cgi?id=451004 says we don't)
* bandwidth issue: no way (pref) to turn off video or audio. Apparently a kill switch is already planned as a fall-back in case of legal issues: https://bugzilla.mozilla.org/show_bug.cgi?id=448600
* bandwidth issue: no way (pref) to turn off video or audio. Apparently a kill switch is already planned as a fall-back in case of legal issues: https://bugzilla.mozilla.org/show_bug.cgi?id=448600
** But it's too late to add significant new UI
** But it's too late to add significant new UI
canmove, Confirmed users
640

edits