Page 1 of 1
ClearClick vs. ask-to-activate plugin overlay
Posted: Thu May 23, 2013 3:26 pm
by ultramage
The development version of Firefox has the option to mark plugins as "Ask to activate". This places a transparent overlay on the plugin area and adds a activation button in the center and a close button in the upper right corner. Clicking on this area trips NoScript's clickjacking/ui-redressing detection.
If possible, it would be nice if NoScript somehow took care of this automatically, so that I wouldn't have to go around adding exceptions to every video hosting site.
Re: ClearClick vs. ask-to-activate plugin overlay
Posted: Tue Jun 18, 2013 1:40 pm
by therube
Clickjack report number & URL where this happens?
Re: ClearClick vs. ask-to-activate plugin overlay
Posted: Tue Jun 18, 2013 7:17 pm
by ultramage
browser: firefox 24 alpha with flash plugin set to 'ask to activate'
url: any youtube url (flash video), for example; any plugin that's set to 'ask to activate'
clickjack report number: did you read my post, or just skimmed the title for keywords?
Re: ClearClick vs. ask-to-activate plugin overlay
Posted: Tue Jun 18, 2013 7:26 pm
by therube
Does it also happen in FF21?
There is no "report" button?
Re: ClearClick vs. ask-to-activate plugin overlay
Posted: Tue Jun 18, 2013 7:36 pm
by ultramage
FF21 does not yet have the 'ask to activate' plugin option, so not it cannot happen.
I know there is a report button, but I thought it would not be a smart idea to click that. Should I? Wouldn't that report a false positive?
Re: ClearClick vs. ask-to-activate plugin overlay
Posted: Tue Jun 18, 2013 8:32 pm
by therube
> Wouldn't that report a false positive?
That
is the idea
.
FF21 does have
plugins.click_to_play, though I wasn't able to duplicate the CC by enabling it.
FF Click To Play Changes are coming