[FIXED] Flash SetVariable overwritten in trusted sites
Posted: Tue Oct 15, 2013 1:32 pm
Hi,
i got reports from one of my customers that one of our existing flash based services has stopped working. After a while of debug i was able to nail this down to NoScript Firefox addon.
NoScript always seems to overwrite the GetVariable and GetVariable functions of flash object element, even when the site is a trusted site. When unchecking the Disable Adobe Flash checkbox in the additional embedded options section of the NoScript configuration things start working. All these parameters are listed below a section header that they are only used for untrusted sites. The option to apply these settings also for trusted sites is not checked.
I can reproduce this issue in NoScript 2.6.8.3 and the current development version (Windows 7 32bit, Firefox 24, Flash 11.9).
One can easily test with this form (use the Tto Flash SetVariable test):
http://www.bobbyvandersluis.com/swfobje ... c_com.html
Please let me know if this is a bug.
Thanks
i got reports from one of my customers that one of our existing flash based services has stopped working. After a while of debug i was able to nail this down to NoScript Firefox addon.
NoScript always seems to overwrite the GetVariable and GetVariable functions of flash object element, even when the site is a trusted site. When unchecking the Disable Adobe Flash checkbox in the additional embedded options section of the NoScript configuration things start working. All these parameters are listed below a section header that they are only used for untrusted sites. The option to apply these settings also for trusted sites is not checked.
I can reproduce this issue in NoScript 2.6.8.3 and the current development version (Windows 7 32bit, Firefox 24, Flash 11.9).
One can easily test with this form (use the Tto Flash SetVariable test):
http://www.bobbyvandersluis.com/swfobje ... c_com.html
Please let me know if this is a bug.
Thanks