bugGnash - The GNU Flash player - Bugs: bug #26713, mozilla-gnash-plugin circumvents...

 
 

bug #26713: mozilla-gnash-plugin circumvents firefox proxy-settings

Submitted by:  None
Submitted on:  Mon 01 Jun 2009 12:22:06 AM UTC  
Votes:  50  
 
Category: pluginSeverity: 2 - Minor
Release: NoneStatus: Confirmed
Privacy: PublicAssigned to: Sandro Santilli <strk>
Open/Closed: Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Fri 06 Jul 2012 12:20:29 AM UTC, comment #10:

Pushed a2efa2e to set http_proxy only if not already set.

Gabriele Giacone <gg0>
Project Member
Thu 05 Jul 2012 07:26:59 PM UTC, comment #9:

> Workaround is manually setting http_proxy with credentials and also disabling browser proxy config so that http_proxy var won't be reset w/o credentials. Though that breaks more complex proxy configurations via .pac where proxy may vary or be absent depending on the destination.


Actually, that's not a possible workaround, because in an environment with authenticated proxy you need to configure the browser to use the proxy. As far as I know, at least firefox doesn't use the http_proxy variable.

Gnash should check for the http_proxy environment variable before setting it himself, otherwhise this workaround is impossible.

Anonymous
Thu 05 Jul 2012 02:18:39 PM UTC, comment #8:

> Did you look at "master" as of 30 Oct 2010, as referenced by comment #5 ? The comment suggests support was added at that time.


Indeed proxy is supported and works if unauthenticated. It gets host:port via NPN_GetValueForURL/NPNURLVProxy and sets http_proxy env var accondingly.
If there is user authentication though, NPN_GetValueForURL doesn't provide credentials so gnash can't authenticate.

Workaround is manually setting http_proxy with credentials and also disabling browser proxy config so that http_proxy var won't be reset w/o credentials. Though that breaks more complex proxy configurations via .pac where proxy may vary or be absent depending on the destination.

If proxy credentials can't be got from browser as it seems, fix might be a gnashrc directive (comment #2), even multiple to support complex configurations.

Gabriele Giacone <gg0>
Project Member
Thu 05 Jul 2012 09:52:31 AM UTC, comment #7:

Did you look at "master" as of 30 Oct 2010, as referenced by comment #5 ? The comment suggests support was added at that time.

Sandro Santilli <strk>
Project MemberIn charge of this item.
Wed 04 Jul 2012 10:56:34 PM UTC, comment #6:

see http://lists.gnu.org/archive/html/gnash-dev/2012-07/msg00000.html

Proxy with authentication doesn't work

A workaround is exporting http_proxy=http://<user>:<password>@<proxy>:<proxyport> then fire the browser up.

Gabriele Giacone <gg0>
Project Member
Fri 29 Oct 2010 11:25:15 PM UTC, comment #5:

Support for proxy was actually added in git master.

Sandro Santilli <strk>
Project MemberIn charge of this item.
Thu 02 Jul 2009 01:05:44 PM UTC, comment #4:

The gnash plugin runs inside firefox, so could extract those configurations and set the corresponding environment variables before firing the standalone gnash.

Sandro Santilli <strk>
Project MemberIn charge of this item.
Thu 02 Jul 2009 12:59:09 PM UTC, comment #3:

Surely gnash plugin should use exactly the same settings as Firefox, regardless of any environment variable? If you change your firefox settings you want it to update gnash straight away.

Also, will gnash support authenticated proxies? I'm behind one at work and it causes lots of problems, especially due to the fact that there's an @ in the usernames... but this is fairly common in corporate environments, so it would be great if gnash could cope :o)

Funkster <funkster>
Mon 01 Jun 2009 08:13:34 AM UTC, comment #2:

The simpler way for this would be using an environment variable
so the plugin code can set it after looking at browser setting (if possible).

A gnashrc directive would also be nive for proxy.

Sandro Santilli <strk>
Project MemberIn charge of this item.
Mon 01 Jun 2009 06:49:12 AM UTC, comment #1:

Patch welcome. I doubt that this has high priority at the moment; if you want security for now, disable flash plugins.

Benjamin Wolsey <bwy>
Project Member
Mon 01 Jun 2009 12:22:06 AM UTC, original submission:

since i'm not sure whether this is a bug or a feature i claim that a privacy-aware browser-plugin as gnash aims to be cannot afford such slip.

the only way preventing a cirumvention is to modify .gnashrc and .gnashpluginrc setting: "set localHost true" "set localDomain true" (which by the way won't let gnash connect to any website anymore).

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by gg0 (Posted a comment)
  • -unavailable- added by gg0
  • -unavailable- added by funkster (Posted a comment)
  • -unavailable- added by funkster (Voted in favor of this item)
  • -unavailable- added by strk (Posted a comment)
  • -unavailable- added by bwy (Posted a comment)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 50 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 10 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Thu 05 Jul 2012 02:18:39 PM UTCgg0Summarymozilla-gnash-plugin circumvents firefox proxy-settings =>mozilla-gnash-plugin circumvents firefox proxy-settings
    Wed 04 Jul 2012 10:56:34 PM UTCgg0StatusFixed=>Confirmed
      Open/ClosedClosed=>Open
      Carbon-Copy-=>Added -unavailable-
    Fri 29 Oct 2010 11:25:15 PM UTCstrkStatusNone=>Fixed
      Assigned toNone=>strk
      Open/ClosedOpen=>Closed
    Thu 02 Jul 2009 12:49:59 PM UTCfunksterCarbon-Copy-=>Added funkster
    Mon 01 Jun 2009 06:49:12 AM UTCbwyCategoryNone=>plugin
      Severity3 - Normal=>2 - Minor

    Back to the top


    Powered by Savane 3.1-cleanup1