[FIXED] Flash SetVariable overwritten in trusted sites

[longsleep]

Hi,

i got reports from one of my customers that one of our existing flash based services has stopped working. After a while of debug i was able to nail this down to NoScript Firefox addon.

NoScript always seems to overwrite the GetVariable and GetVariable functions of flash object element, even when the site is a trusted site. When unchecking the Disable Adobe Flash checkbox in the additional embedded options section of the NoScript configuration things start working. All these parameters are listed below a section header that they are only used for untrusted sites. The option to apply these settings also for trusted sites is not checked.

I can reproduce this issue in NoScript 2.6.8.3 and the current development version (Windows 7 32bit, Firefox 24, Flash 11.9).

One can easily test with this form (use the Tto Flash SetVariable test):
http://www.bobbyvandersluis.com/swfobje ... c_com.html


Please let me know if this is a bug.


Thanks

[therube]

(Long URL get truncated on an edit or preview, unless they're in tags.)

Suppose one of these is it?
http://www.bobbyvandersluis.com/swfobject/testsuite_2_2/test_com.html

http://www.bobbyvandersluis.com/swfobject/testsuite_2_2/test_dynamic_com.html

[longsleep]

Oh sorry.

Its one of the Browser communication test page (we use dynamic embed)

http://www.bobbyvandersluis.com/swfobje ... c_com.html

[longsleep]

Btw - the corresponding functions are overwritten in

get _flashPatch() function

inside file components/noscriptService.js (line 5128 in current version).

[Giorgio Maone]

Fixed in latest development build 2.6.8.4rc1, thanks.

[longsleep]

I confirm that the fix works fine (2.6.8.4rc1). Thank you!