[tor-bugs] #3347 [TorBrowserButton]: Permanently Opt-In to YouTube's HTML5 Beta Test

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Tue Jan 24 22:40:41 UTC 2012


#3347: Permanently Opt-In to YouTube's HTML5 Beta Test
------------------------------+---------------------------------------------
 Reporter:  katmagic          |          Owner:  mikeperry                    
     Type:  enhancement       |         Status:  new                          
 Priority:  normal            |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  TorBrowserButton  |        Version:                               
 Keywords:                    |         Parent:                               
   Points:  3                 |   Actualpoints:                               
------------------------------+---------------------------------------------

Comment(by mikeperry):

 Wow, I think this officially qualifies as first good news I've heard all
 year.

 As for auto-allowing these objects, there are two issues with the ideas on
 the tails forum page:

 1. Unchecking the "Apply these restrictions to untrusted sites too"
 checkbox will allow font-face and WebGL to get auto-loaded in our default
 config, and will also cause flash to auto-load for people who have
 discovered how to dig through our layers of disabling in order to enable
 it. I will instead mail Giorgio and inform him that the "Audio/video"
 checkbox doesn't seem to be working right with Youtube. He is usually
 pretty prompt with stuff like this.

 2. I am still not 100% sure I want to make audio and video codecs autoplay
 without the user clicking on them.. Have they had enough auditing and
 trial by fire to reduce the vulnerability rate to something acceptable?
 Firefox 9 had at least one video vuln..

 However, if people think that NoScript click-to-play is too confusing, I
 could be persuaded to turn it on, pending Giorgio's fixes to allow just
 audio/video.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3347#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list