Opened 8 years ago

Closed 7 years ago

#5383 closed defect (fixed)

[CHROME] NPR.org Slideshow Breaks

Reported by: dthvt Owned by: pde
Priority: Medium Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Using Google Chrome + HTTPS Everywhere, NPR.org articles featuring photo slide shows will not load the slide show.

Example URL:

https://www.npr.org/blogs/pictureshow/2012/03/13/148479994/car-pool-aerial-views-of-how-mexico-moves?sc=fb&cc=fp

The actual code on the page appears to load a SWF object. I'm not familiar with the security restrictions in flash, so maybe this is a SSL + Flash issue?

Relevant snippet is:

<div class="bucket">

<div class="graphicwrapper">

<div id="slideshow148480157">

<p><img src="http://media.npr.org/assets/multimedia/pictureshow/2012/03/carpool/fullscreen/10__alejan_tagena.jpg?t=1331593226&amp;s=3" alt="Slideshow" /></p> <p class="browser"><strong>This graphic requires version 9 or higher of the Adobe Flash Player.</strong><a href="http://www.adobe.com/products/flashplayer/" target="_blank">Get the latest Flash Player.</a></p> <p class="iSomething"><strong>This interactive content is not supported by this device.</strong></p> <p>Carpools</p>

</div>


<!-- END ID="SLIDESHOW148480157" -->

<script>

var so = new SWFObject("/design/flash_templates/preloaderAS3.swf", "soundslider", "462", "380", "9", "#FFFFFF"); so.addParam("allowScriptAccess", "always");

so.addParam("quality", "high");
so.addParam("wmode", "transparent");
so.addParam("allowFullScreen", "true"); so.addVariable("thexml", "http://media.npr.org/assets/multimedia/pictureshow/2012/03/carpool/"); so.addVariable("theswf", "http://media.npr.org/design/flash_templates/nprgallery_embed.swf?path=http://media.npr.org/assets/multimedia/pictureshow/2012/03/carpool/"); so.write("slideshow148480157");

</script>

</div>


<!-- END CLASS="GRAPHICWRAPPER" -->

<div class="footer">

<p><span class="credit_label">Credit: </span>Alejandro Cartagena</p>

</div>


<!-- END CLASS="FOOTER" -->

</div>


<!-- END CLASS="BUCKET" -->

</div>

Google Chrome 17.0.963.78 m

HTTPS Everywhere 2012.2.27_0

Child Tickets

Change History (3)

comment:1 Changed 8 years ago by aaronsw

Owner: changed from aaronsw to pde
Status: newassigned

comment:2 Changed 8 years ago by pde

Component: HTTPS Everywhere: ChromeEFF-HTTPS Everywhere
Summary: HTTPS Everywhere Chrome: NPR.org Slideshow Breaks[CHROME] NPR.org Slideshow Breaks

comment:3 Changed 7 years ago by pde

Resolution: fixed
Status: assignedclosed

This is fixed in 2012.10.31 (which disabled the NPR ruleset by default) if not before.

Note: See TracTickets for help on using tickets.