ClearClick vs. ask-to-activate plugin overlay

Bug reports and enhancement requests
Post Reply
ultramage
Posts: 9
Joined: Thu May 23, 2013 3:12 pm

ClearClick vs. ask-to-activate plugin overlay

Post by ultramage »

The development version of Firefox has the option to mark plugins as "Ask to activate". This places a transparent overlay on the plugin area and adds a activation button in the center and a close button in the upper right corner. Clicking on this area trips NoScript's clickjacking/ui-redressing detection.

If possible, it would be nice if NoScript somehow took care of this automatically, so that I wouldn't have to go around adding exceptions to every video hosting site.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: ClearClick vs. ask-to-activate plugin overlay

Post by therube »

Clickjack report number & URL where this happens?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
ultramage
Posts: 9
Joined: Thu May 23, 2013 3:12 pm

Re: ClearClick vs. ask-to-activate plugin overlay

Post by ultramage »

browser: firefox 24 alpha with flash plugin set to 'ask to activate'
url: any youtube url (flash video), for example; any plugin that's set to 'ask to activate'
clickjack report number: did you read my post, or just skimmed the title for keywords?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: ClearClick vs. ask-to-activate plugin overlay

Post by therube »

Does it also happen in FF21?

There is no "report" button?

Image
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
ultramage
Posts: 9
Joined: Thu May 23, 2013 3:12 pm

Re: ClearClick vs. ask-to-activate plugin overlay

Post by ultramage »

FF21 does not yet have the 'ask to activate' plugin option, so not it cannot happen.
I know there is a report button, but I thought it would not be a smart idea to click that. Should I? Wouldn't that report a false positive?
Last edited by ultramage on Thu Nov 13, 2014 12:49 pm, edited 1 time in total.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: ClearClick vs. ask-to-activate plugin overlay

Post by therube »

> Wouldn't that report a false positive?

That is the idea :-).

FF21 does have plugins.click_to_play, though I wasn't able to duplicate the CC by enabling it.

FF Click To Play Changes are coming
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
Post Reply