PluginUpdating: Difference between revisions
| Line 22: | Line 22: | ||
== Updated == | == Updated == | ||
Add similar alert to the "you've been updated" page which leads to the [[#UpYourPlug page|plug-in check page]]. | Add similar alert to the "you've been updated" page which leads to the [[#UpYourPlug page|plug-in check page]]. | ||
== Implementation == | |||
It will be easiest to check the basic functionality in Javascript. [https://bugzilla.mozilla.org/show_bug.cgi?id=282257 Bug 282258] has some script for checking if Java is up to date. | |||
= UpYourPlug page = | = UpYourPlug page = | ||
Revision as of 17:49, 6 August 2007
Problem Statement
Our users often get hacked via vulnerable third party plug-ins.
Proposal
Add scripts on common landing pages to check for vulnerable plug-ins and assist the user in updating them.
Components
- Script and alert on landing pages
- Page that checks all the common plug-ins and assists in the update
Landing pages
First Run
Add an alert that checks the first time a user opens Firefox:
Message: We detected that some of your media plug-ins are vulnerable, click here for more info.
This is non-evasive, as we do not want to have the user have trouble getting started with Firefox.
stick mock-up and plans for how it will look here
This will lead the user to the plug-in check page.
Updated
Add similar alert to the "you've been updated" page which leads to the plug-in check page.
Implementation
It will be easiest to check the basic functionality in Javascript. Bug 282258 has some script for checking if Java is up to date.
UpYourPlug page
This page will do a check on common plug-ins and see if they are vulnerable or not.
The plug-ins:
- Java
- Flash
- Windows media player
- Quicktime
- Real player
Mock-up
Here is a cheesy mock-up of the idea for the plug-in update check page.
