Opt-in activation for plugins: Difference between revisions

no edit summary
(Undo revision 399972 by Ladamski (talk))
No edit summary
Line 9: Line 9:
|Feature product manager=Asa Dotzler
|Feature product manager=Asa Dotzler
|Feature feature manager=Justin Dolske
|Feature feature manager=Justin Dolske
|Feature lead engineer=Blair McBride
|Feature lead engineer=Jared Wein
|Feature security lead=David Chan (dchan)
|Feature security lead=David Chan (dchan)
|Feature privacy lead=Sid Stamm (geekboy)
|Feature privacy lead=Sid Stamm (geekboy)
Line 29: Line 29:
|Feature requirements=* Ability to set autoplay, click-to-play or never play on any plugin
|Feature requirements=* Ability to set autoplay, click-to-play or never play on any plugin
* Built-in whitelist for the most common plugins
* Built-in whitelist for the most common plugins
|Feature ux design=* Settings: Render this plugin: (Always
|Feature ux design=When plugins are found on a page, their start up will be delayed until a user performs interaction with the browser to enable the running of the plugin.
 
Visible plugins will have a chrome-privileged overlay that users will click on to activate the plugin. Invisible (or barely visible) plugins will cause an infobar to appear to enable all plugins on the page.
 
Phase 1 of this project will be an "all or nothing" strategy. Adding another hurdle for drive-by attacks will be an improvement over where we are now.
 
Future phases may incorporate a way for users to selectively enable specific plugin types (Flash vs. Java vs. Silverlight etc.). This implementation hasn't been designed or agreed upon yet, but it may be similar to the blocked-popup context menu.
|Feature implementation notes=Implementation work starting in {{bug|549697}}.
|Feature implementation notes=Implementation work starting in {{bug|549697}}.
}}
}}
Line 39: Line 45:
|Feature secondary roadmap=User Experience
|Feature secondary roadmap=User Experience
|Feature list=Desktop
|Feature list=Desktop
|Feature project=Responsiveness
|Feature engineering team=Desktop front-end
|Feature engineering team=Desktop front-end
}}
}}
Confirmed users
313

edits