[tor-bugs] #3347 [TorBrowserButton]: Permanently Opt-In to YouTube's HTML5 Beta Test
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Tue Jan 24 22:40:41 UTC 2012
#3347: Permanently Opt-In to YouTube's HTML5 Beta Test
------------------------------+---------------------------------------------
Reporter: katmagic | Owner: mikeperry
Type: enhancement | Status: new
Priority: normal | Milestone: TorBrowserBundle 2.2.x-stable
Component: TorBrowserButton | Version:
Keywords: | Parent:
Points: 3 | Actualpoints:
------------------------------+---------------------------------------------
Comment(by mikeperry):
Wow, I think this officially qualifies as first good news I've heard all
year.
As for auto-allowing these objects, there are two issues with the ideas on
the tails forum page:
1. Unchecking the "Apply these restrictions to untrusted sites too"
checkbox will allow font-face and WebGL to get auto-loaded in our default
config, and will also cause flash to auto-load for people who have
discovered how to dig through our layers of disabling in order to enable
it. I will instead mail Giorgio and inform him that the "Audio/video"
checkbox doesn't seem to be working right with Youtube. He is usually
pretty prompt with stuff like this.
2. I am still not 100% sure I want to make audio and video codecs autoplay
without the user clicking on them.. Have they had enough auditing and
trial by fire to reduce the vulnerability rate to something acceptable?
Firefox 9 had at least one video vuln..
However, if people think that NoScript click-to-play is too confusing, I
could be persuaded to turn it on, pending Giorgio's fixes to allow just
audio/video.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3347#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list