InformAction Forums

This may have already been posted and answered although I did a search and couldn't find anything. When going to some pages with FF 3.5.1 that have embedded OGV there is automatic playback with no blocking ability, even with javascript off. Here is one example:

http://videos.mozilla.org/firefox/3.5/o ... erview.ogv

This page does have the blocking object:

http://blog.mozilla.com/cjones/2009/06/ ... -near-you/

Is there a setting in Advanced to keep these videos from automatically playing or is that for future releases? Restrictions are in place for Trusted and Untrusted sites. To me it's unacceptable as it can be potentially abused as Flash is.

That first link is directly to the location of the video file itself, not to a page with the video embedded, so a placeholder can't be made for it, as far as I can work out.
Analogous to the way images have always (mostly) been given transparent locations, OGVs can be saved in the same way as images now.
The second link does indeed go to a page with an embedded video, so NS can in that case show a placeholder.

You are correct GOL, the videos are treated similar to images and GIF animations. Flash videos will do the same thing if you plug in the direct url of the video, although you will get the placeholder. Still I wonder how long it will be before unscrupulous advertisers and malware writers find a way to take advantage of this? Maybe someone with a little more knowledge of the new code in FF 3.5 than me can explain.

mpz wrote: Still I wonder how long it will be before unscrupulous advertisers and malware writers find a way to take advantage of this?

In facts, blocking top-level built-in video/audio support and providing placeholders just like for top-level plugin content is high in my priority list, because just like plugins, codecs for HTML 5 video/audio support can be buggy and exploitable.

Giorgio Maone wrote:

mpz wrote: Still I wonder how long it will be before unscrupulous advertisers and malware writers find a way to take advantage of this?

In facts, blocking top-level built-in video/audio support and providing placeholders just like for top-level plugin content is high in my priority list, because just like plugins, codecs for HTML 5 video/audio support can be buggy and exploitable.

That's good to hear then. Anytime you've got something running automatically it's potentially a disaster waiting to happen.

Quoth mpz:

Flash videos will do the same thing if you plug in the direct url of the video, although you will get the placeholder.

Ah, of course! Brain's in gear now. Guess who doesn't use active content much?!

Giorgio Maone wrote:In facts, blocking top-level built-in video/audio support and providing placeholders just like for top-level plugin content is high in my priority list, because just like plugins, codecs for HTML 5 video/audio support can be buggy and exploitable.

Done in 1.9.7.5

Giorgio Maone wrote: Done in 1.9.7.5 :)

Brisk work prof. :applause: