[GNU-linux-libre] Browser plugins Fwd: Plugin Finder Service and Flash

[Nicolás Reynolds]

I just found this email from IceCat list. Epiphany was also reported as
showing the message, but it looked like a site's javascript popup.

----- Forwarded message from Christophe Jarry <address@hidden> -----

> Date: Tue, 28 Dec 2010 14:14:20 +0100 From: Christophe Jarry
> <address@hidden> To: address@hidden Subject: Plugin
> Finder Service and Flash X-Mailer: Claws Mail 3.5.0 (GTK+ 2.12.12;
> mipsel-unknown-linux-gnu)
> 
> Dear developers and users,
> 
> I am trying to fix a freedom bug I have with galeon 2.0.6 web browser on
> gNewSense metad: it proposes to download proprietary plugins [1]. The
> problem seems to come from the Plugin Finder Service (PFS) in xulrunner
> (version 1.9.0.19 here). More precisely, from the file
> "browser/app/profile/firefox.js", at this line:
> 
>   pref("pfs.datasource.url","https://pfs.mozilla.org/plugins/
>   PluginFinderService.php?mimetype=%PLUGIN_MIMETYPE%&appID=%APP_ID%
>   &appVersion=%APP_VERSION%&clientOS=%CLIENT_OS%
>   &chromeLocale=%CHROME_LOCALE%&appRelease=%APP_RELEASE%");
> 
> Looking at IceCat's code, that line has been replaced by this one:
> 
>   pref("pfs.datasource.url","http://gnuzilla.gnu.org/plugins/
>   PluginFinderService.php?mimetype=%PLUGIN_MIMETYPE%&appID=%APP_ID%
>   &appVersion=%APP_VERSION%&clientOS=%CLIENT_OS%
>   &chromeLocale=%CHROME_LOCALE%&appRelease=%APP_RELEASE%");
> 
> In my attempt to fix that freedom bug, I successfully built a .deb
> package by merging SVN IceCat changes [2] to xulrunner-1.9.0.19 source
> code I got from debian [3]. I then replaced xulrunner on my system with
> my packaged version. I reinstalled Galeon which now uses my packaged
> version of xulrunner but still have the freedom bug. Below are some of
> the issues I encounter.
> 
> 1. If I visit
> http://www.youtube.com/watch?v=xGlfUhtB02I&feature=hp_SLN_curated&list=SL,
> the "plugin popup" appears and a click on "OK" redirects to
> http://plugindoc.mozdev.org/winmime.html?application/x-shockwave-flash,
> which is a blank page. Its source code reads:
> 
>   <?php $input = $_SERVER['REQUEST_URI']; { $var = str_replace(html,
>   'php', $input); header("HTTP/1.1 301 Moved Permanently");
>   header("Location: http://plugindoc.mozdev.org$var";);
>   
>   } ?> 
> 
> 2. If I visit http://www.adobe.com/software/flash/about/, the "plugin
> popup" redirects me to
> http://get.adobe.com/flashplayer/?application/x-shockwave-flash this
> time.
> 
> I think users should always be redirected to
> http://www.gnu.org/software/gnash/ instead.
> 
> Moreover, I would like to know if IceCat users have the same (1. and 2.)
> problems that I have.
> 
> Christophe
> 
> [1] http://savannah.nongnu.org/bugs/?30027 [2]
> svn://svn.savannah.gnu.org/gnuzilla/trunk/icecat [3]
> http://security.debian.org/debian-security/pool/updates/main/x/xulrunner/
> 
> -- http://gnuzilla.gnu.org
> 

----- End forwarded message -----

-- 
Salud!
Nicolás Reynolds,
xmpp:address@hidden
omb:http://identi.ca/fauno
blog:http://selfdandi.com.ar/
gnu/linux user #455044

OTR: C0CB1F0F 01DB5E18 2D634C2A A4626858 E7C7C3A2

http://parabolagnulinux.org
http://endefensadelsl.org

pgpHVjFy6_eJ3.pgp
Description: PGP signature