Unknown, slow or insecure plugins shouldn't be allowed to run without user interaction.
Meant to help with multiple scenarios:
# Accidental/malicious install: "Hey, we suddenly found a new SketchyWare.dll plugin on your system. Did you actually want to use it?"
# Performance: The "Java makes my system asplode when a page loads, but sometimes I want to use it" problem.
# Security: Users who don't trust Flash, as well as giving us a way to soft-block a plugin that a user needs to use on legit sites (YouTube, intranet, whatever).
== Team ==
* '''Feature Manager''': Justin Dolske
* '''Lead Developer''':
* '''Product Manager''':
* '''QA''': AndreiD (irc: andreid)
* '''UX''': Alex Limi
* '''Accessibility''':
* '''Security''': David Chan (dchan)
* '''Privacy''': Sid Stamm (geekboy)
== Release Requirements ==
* Ability to set autoplay, click-to-play or never play on any plugin
* Built-in whitelist for the most common plugins
== Designs ==
* Settings: Render this plugin: (Always|when clicked|never)
* When you have clicked a particular plugin on a given site 3 times or more, we should enable it automatically from then on if you haven't explicitly said otherwise.
* Optional, but interesting: Ability to soft-block 0-day using click-to-play.