Opened 4 weeks ago

Last modified 9 days ago

#29904 new defect

NoScript blocks MP4 videos on "Safer" and "Safest" without click-to-play option

Reported by: gk Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: noscript, tbb-8.0-issues, tbb-8.0-regression
Cc: ma1, adrelanos@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

In #28720 a regression in NoScript for click-to-play videos got investigated and fixed. However, there seem to be more cases that are unresolved so far. Examples are:

https://justi.cz/security/2018/11/14/gvisor-lpe.html
https://www.destroyallsoftware.com/talks/wat
http://www.html5videoplayer.net/html5video/mp4-h-264-video-test/
https://camendesign.com/code/video_for_everybody/test.html

It seems to be related to MP4. I did not find an older NoScript WebExtensions version where this did work, so no regression range.

That's again easily reproducible in a vanilla Firefox 60 ESR, by making sure everything in NoScript is allowed but media and then visiting the above mentioned URLs.

Child Tickets

Change History (3)

comment:1 Changed 4 weeks ago by cypherpunks

Unless you copy the video link and visit directly, click-to-play then shows up.

comment:2 Changed 3 weeks ago by adrelanos

Cc: adrelanos@… added

comment:3 Changed 9 days ago by gk

FWIW: on Ctrl+I (page Info) > Media Tab one is able to play the video (found on https://blog.torproject.org/comment/280654#comment-280654).

Note: See TracTickets for help on using tickets.