Page 1 of 1

[FIXED] Flash SetVariable overwritten in trusted sites

Posted: Tue Oct 15, 2013 1:32 pm
by longsleep
Hi,

i got reports from one of my customers that one of our existing flash based services has stopped working. After a while of debug i was able to nail this down to NoScript Firefox addon.

NoScript always seems to overwrite the GetVariable and GetVariable functions of flash object element, even when the site is a trusted site. When unchecking the Disable Adobe Flash checkbox in the additional embedded options section of the NoScript configuration things start working. All these parameters are listed below a section header that they are only used for untrusted sites. The option to apply these settings also for trusted sites is not checked.

I can reproduce this issue in NoScript 2.6.8.3 and the current development version (Windows 7 32bit, Firefox 24, Flash 11.9).

One can easily test with this form (use the Tto Flash SetVariable test):
http://www.bobbyvandersluis.com/swfobje ... c_com.html


Please let me know if this is a bug.


Thanks

Re: Flash SetVariable overwritten in trusted sites

Posted: Tue Oct 15, 2013 2:10 pm
by therube
(Long URL get truncated on an edit or preview, unless they're in tags.)

Suppose one of these is it?
http://www.bobbyvandersluis.com/swfobject/testsuite_2_2/test_com.html

http://www.bobbyvandersluis.com/swfobject/testsuite_2_2/test_dynamic_com.html

Re: Flash SetVariable overwritten in trusted sites

Posted: Tue Oct 15, 2013 4:44 pm
by longsleep
Oh sorry.

Its one of the Browser communication test page (we use dynamic embed)

http://www.bobbyvandersluis.com/swfobje ... c_com.html

Re: Flash SetVariable overwritten in trusted sites

Posted: Tue Oct 15, 2013 4:50 pm
by longsleep
Btw - the corresponding functions are overwritten in

get _flashPatch() function

inside file components/noscriptService.js (line 5128 in current version).

Re: Flash SetVariable overwritten in trusted sites

Posted: Tue Oct 15, 2013 6:10 pm
by Giorgio Maone
Fixed in latest development build 2.6.8.4rc1, thanks.

Re: Flash SetVariable overwritten in trusted sites

Posted: Wed Oct 16, 2013 8:32 am
by longsleep
I confirm that the fix works fine (2.6.8.4rc1). Thank you!