bugGnash - The GNU Flash player - Bugs: bug #26713, mozilla-gnash-plugin circumvents...

 
 

bug #26713: mozilla-gnash-plugin circumvents firefox proxy-settings

Submitter:  None
Submitted:  Mon 01 Jun 2009 12:22:06 AM UTC
Votes: 50
 
Category:  plugin Severity:  2 - Minor
Priority:  5 - Normal Release:  None
Status:  Confirmed Privacy:  Public
Assigned to:  strk Open/Closed:  Open
* Mandatory Fields

Post a Comment

Add a New Comment Rich Markup
   

Discussion

Jump to the original submission

Fri 06 Jul 2012 12:20:29 AM UTC, comment #10: 

Pushed a2efa2e to set http_proxy only if not already set.

Gabriele Giacone <gg0>
Group Member
Thu 05 Jul 2012 07:26:59 PM UTC, comment #9: 


> Workaround is manually setting http_proxy with credentials and also disabling browser proxy config so that http_proxy var won't be reset w/o credentials. Though that breaks more complex proxy configurations via .pac where proxy may vary or be absent depending on the destination.


Actually, that's not a possible workaround, because in an environment with authenticated proxy you need to configure the browser to use the proxy. As far as I know, at least firefox doesn't use the http_proxy variable.

Gnash should check for the http_proxy environment variable before setting it himself, otherwhise this workaround is impossible.

Anonymous
Thu 05 Jul 2012 02:18:39 PM UTC, comment #8: 


> Did you look at "master" as of 30 Oct 2010, as referenced by comment #5 ? The comment suggests support was added at that time.


Indeed proxy is supported and works if unauthenticated. It gets host:port via NPN_GetValueForURL/NPNURLVProxy and sets http_proxy env var accondingly.
If there is user authentication though, NPN_GetValueForURL doesn't provide credentials so gnash can't authenticate.

Workaround is manually setting http_proxy with credentials and also disabling browser proxy config so that http_proxy var won't be reset w/o credentials. Though that breaks more complex proxy configurations via .pac where proxy may vary or be absent depending on the destination.

If proxy credentials can't be got from browser as it seems, fix might be a gnashrc directive (comment #2), even multiple to support complex configurations.

Gabriele Giacone <gg0>
Group Member
Thu 05 Jul 2012 09:52:31 AM UTC, comment #7: 

Did you look at "master" as of 30 Oct 2010, as referenced by comment #5 ? The comment suggests support was added at that time.

Sandro Santilli <strk>
Group Member
Wed 04 Jul 2012 10:56:34 PM UTC, comment #6: 

see http://lists.gnu. ... -07/msg00000.html

Proxy with authentication doesn't work

A workaround is exporting http_proxy=http://<user>:<password>@<proxy>:<proxyport> then fire the browser up.

Gabriele Giacone <gg0>
Group Member
Fri 29 Oct 2010 11:25:15 PM UTC, comment #5: 

Support for proxy was actually added in git master.

Sandro Santilli <strk>
Group Member
Thu 02 Jul 2009 01:05:44 PM UTC, comment #4: 

The gnash plugin runs inside firefox, so could extract those configurations and set the corresponding environment variables before firing the standalone gnash.

Sandro Santilli <strk>
Group Member
Thu 02 Jul 2009 12:59:09 PM UTC, comment #3: 

Surely gnash plugin should use exactly the same settings as Firefox, regardless of any environment variable? If you change your firefox settings you want it to update gnash straight away.

Also, will gnash support authenticated proxies? I'm behind one at work and it causes lots of problems, especially due to the fact that there's an @ in the usernames... but this is fairly common in corporate environments, so it would be great if gnash could cope  :o)

Funkster <funkster>
Mon 01 Jun 2009 08:13:34 AM UTC, comment #2: 

The simpler way for this would be using an environment variable
so the plugin code can set it after looking at browser setting (if possible).

A gnashrc directive would also be nive for proxy.

Sandro Santilli <strk>
Group Member
Mon 01 Jun 2009 06:49:12 AM UTC, comment #1: 

Patch welcome. I doubt that this has high priority at the moment; if you want security for now, disable flash plugins.

Benjamin Wolsey <bwy>
Group Member
Mon 01 Jun 2009 12:22:06 AM UTC, original submission:  

since i'm not sure whether this is a bug or a feature i claim that a privacy-aware browser-plugin as gnash aims to be cannot afford such slip.

the only way preventing a cirumvention is to modify .gnashrc and .gnashpluginrc setting: "set localHost true" "set localDomain true" (which by the way won't let gnash connect to any website anymore).

Anonymous

 

Attached Files

This item currently has no attached files.

(Note: upload size limit is set to 4.0MiB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

 

Dependencies

This item does not depend on any other items.

No items depend on this one.

 

Mail Notification Carbon-Copy List

Carbon-Copy List
  • -email is unavailable- added by gg0 (Posted a comment)
  • -email is unavailable- added by gg0
  • -email is unavailable- added by funkster (Posted a comment)
  • -email is unavailable- added by funkster (Voted in favor of this item)
  • -email is unavailable- added by strk (Posted a comment)
  • -email is unavailable- added by bwy (Posted a comment)
  •  

    Votes

    There are 50 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

    History

    Follow 10 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-07-05 gg0 Summarymozilla-gnash-plugin circumvents firefox proxy-settings mozilla-gnash-plugin circumvents firefox proxy-settings
    2012-07-04 gg0 StatusFixed Confirmed
        Open/ClosedClosed Open
        Carbon-Copy- Added -email is unavailable-
    2010-10-29 strk StatusNone Fixed
        Assigned toNone strk
        Open/ClosedOpen Closed
    2009-07-02 funkster Carbon-Copy- Added funkster
    2009-06-01 bwy CategoryNone plugin
        Severity3 - Normal 2 - Minor

    Back to the top

    Powered by Savane 3.16-598c.
    Corresponding source code