Changes

Jump to: navigation, search

Opt-in activation for plugins

1,816 bytes added, 12:22, 11 July 2011
m
no edit summary
{{FeatureStatus
|Feature name=Opt-in activation for plugins
|Feature stage=Definition
|Feature health=OK
}}
{{FeatureTeam
|Feature feature manager=Justin Dolske
|Feature lead engineer=Justin Dolske
|Feature security lead=David Chan (dchan)
|Feature privacy lead=Sid Stamm (geekboy)
|Feature qa lead=AndreiD (andreid)
|Feature ux lead=Alex Limi
}}
{{FeaturePageBody
|Feature overview=Unknown, slow or insecure plugins shouldn't be allowed to run without user interaction.
Meant to help with multiple scenarios:
 
# Accidental/malicious install: "Hey, we suddenly found a new SketchyWare.dll plugin on your system. Did you actually want to use it?"
# Performance: The "Java makes my system asplode when a page loads, but sometimes I want to use it" problem.
# Security: Users who don't trust Flash, as well as giving us a way to soft-block a plugin that a user needs to use on legit sites (YouTube, intranet, whatever).
 
Chrome already does something similar.
|Feature requirements=* Ability to set autoplay, click-to-play or never play on any plugin
* Built-in whitelist for the most common plugins
 
|Feature ux design=* Settings: Render this plugin: (Always|when clicked|never)
* When you have clicked a particular plugin on a given site 3 times or more, we should enable it automatically from then on if you haven't explicitly said otherwise.
* Optional, but interesting: Ability to soft-block 0-day using click-to-play.
}}
{{FeatureInfo
|Feature priority=P1
|Feature roadmap=User Experience
|Feature list=Desktop
|Feature engineering team=Desktop front-end
}}
{{FeatureTeamStatus
|Feature products status=tbd
|Feature engineering status=tbd
|Feature security status=tbd
|Feature privacy status=tbd
|Feature localization status=tbd
|Feature accessibility status=tbd
|Feature qa status=tbd
|Feature ux status=tbd
}}
Canmove, confirm, emeritus
6,906
edits

Navigation menu