Opt-in activation for plugins: Difference between revisions

Jump to navigation Jump to search
no edit summary
No edit summary
No edit summary
Line 107: Line 107:


Phase 2:
Phase 2:
Users can turn on preferences to require click to play for specific plugins.  And potentially per site preferences.
Phase 3:
Users can turn on preferences to require click to play for specific plugins.
Mozilla can remotely configure the user's browser to require click to play for specific plugins that are out-of-date and/or vulnerable.
Mozilla can remotely configure the user's browser to require click to play for specific plugins that are out-of-date and/or vulnerable.
(Note that we may allow vendors a few days or a week to update their users before remotely requiring click to play on a plugin.  This will depend on the severity of the vulnerabilities in the plugin.). The plugin blocklist may also be used in some cases, as it recently was to block widespread exploitation of Java.  When Phase 3 lands, User & Use Cases 1-7 will all have been implemented.
(Note that we may allow vendors a few days or a week to update their users before remotely requiring click to play on a plugin.  This will depend on the severity of the vulnerabilities in the plugin.).


Phase 4: Explore possible future Use Cases 1-3.  This needs more research.  Can we leverage user behavior to define a heuristic of when a plugin should be click to play? Can we collect Telemetry data to help us understand how often plugins are used ?
Phase 3: Explore possible future Use Cases 1-3.  This needs more research.  Can we leverage user behavior to define a heuristic of when a plugin should be click to play? Can we collect Telemetry data to help us understand how often plugins are used?
|Feature implementation notes=Meta bug for the work is {{bug|738698}}
|Feature implementation notes=Meta bug for the work is {{bug|738698}}
Implementation work began in {{bug|711552}} 'Create click to play UI for desktop'


See also {{bug|711618}} 'implement click to play permission model'
See also {{bug|711618}} 'implement click to play permission model'
Line 123: Line 117:


{{bug|742753}} concerns only playing the instance of the plugin that has actually been clicked and also about some of the problems involved with 'invisible'/helper content - this has some prior history as well due to problems encountered when implementing click to play in Fennec.
{{bug|742753}} concerns only playing the instance of the plugin that has actually been clicked and also about some of the problems involved with 'invisible'/helper content - this has some prior history as well due to problems encountered when implementing click to play in Fennec.
When {{bug|711618}} lands, implementation of phase 1 will be complete.


Phase 1 landed in Firefox 14.
Phase 1 landed in Firefox 14.
Confirmed users
304

edits

Navigation menu