The development version of Firefox has the option to mark plugins as "Ask to activate". This places a transparent overlay on the plugin area and adds a activation button in the center and a close button in the upper right corner. Clicking on this area trips NoScript's clickjacking/ui-redressing detection.
If possible, it would be nice if NoScript somehow took care of this automatically, so that I wouldn't have to go around adding exceptions to every video hosting site.
ClearClick vs. ask-to-activate plugin overlay
ClearClick vs. ask-to-activate plugin overlay
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
Re: ClearClick vs. ask-to-activate plugin overlay
Clickjack report number & URL where this happens?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
Re: ClearClick vs. ask-to-activate plugin overlay
browser: firefox 24 alpha with flash plugin set to 'ask to activate'
url: any youtube url (flash video), for example; any plugin that's set to 'ask to activate'
clickjack report number: did you read my post, or just skimmed the title for keywords?
url: any youtube url (flash video), for example; any plugin that's set to 'ask to activate'
clickjack report number: did you read my post, or just skimmed the title for keywords?
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
Re: ClearClick vs. ask-to-activate plugin overlay
Does it also happen in FF21?
There is no "report" button?

There is no "report" button?

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2
Re: ClearClick vs. ask-to-activate plugin overlay
FF21 does not yet have the 'ask to activate' plugin option, so not it cannot happen.
I know there is a report button, but I thought it would not be a smart idea to click that. Should I? Wouldn't that report a false positive?
I know there is a report button, but I thought it would not be a smart idea to click that. Should I? Wouldn't that report a false positive?
Last edited by ultramage on Thu Nov 13, 2014 12:49 pm, edited 1 time in total.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:21.0) Gecko/20100101 Firefox/21.0
Re: ClearClick vs. ask-to-activate plugin overlay
> Wouldn't that report a false positive?
That is the idea
.
FF21 does have plugins.click_to_play, though I wasn't able to duplicate the CC by enabling it.
FF Click To Play Changes are coming
That is the idea

FF21 does have plugins.click_to_play, though I wasn't able to duplicate the CC by enabling it.
FF Click To Play Changes are coming
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 SeaMonkey/2.19a2