bugGnash - The GNU Flash player - Bugs: bug #26713, mozilla-gnash-plugin circumvents...

 
 

bug #26713: mozilla-gnash-plugin circumvents firefox proxy-settings

Submitter:  None
Submitted:  Mon 01 Jun 2009 12:22:06 AM UTC
Votes: 50
 
Category:  plugin Severity:  2 - Minor
Release:  None Status:  Confirmed
Privacy:  Public Assigned to:  strk
Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Fri 06 Jul 2012 12:20:29 AM UTC, comment #10: 

Pushed a2efa2e to set http_proxy only if not already set.

Gabriele Giacone <gg0>
Group Member
Thu 05 Jul 2012 07:26:59 PM UTC, comment #9: 


> Workaround is manually setting http_proxy with credentials and also disabling browser proxy config so that http_proxy var won't be reset w/o credentials. Though that breaks more complex proxy configurations via .pac where proxy may vary or be absent depending on the destination.


Actually, that's not a possible workaround, because in an environment with authenticated proxy you need to configure the browser to use the proxy. As far as I know, at least firefox doesn't use the http_proxy variable.

Gnash should check for the http_proxy environment variable before setting it himself, otherwhise this workaround is impossible.

Anonymous
Thu 05 Jul 2012 02:18:39 PM UTC, comment #8: 


> Did you look at "master" as of 30 Oct 2010, as referenced by comment #5 ? The comment suggests support was added at that time.


Indeed proxy is supported and works if unauthenticated. It gets host:port via NPN_GetValueForURL/NPNURLVProxy and sets http_proxy env var accondingly.
If there is user authentication though, NPN_GetValueForURL doesn't provide credentials so gnash can't authenticate.

Workaround is manually setting http_proxy with credentials and also disabling browser proxy config so that http_proxy var won't be reset w/o credentials. Though that breaks more complex proxy configurations via .pac where proxy may vary or be absent depending on the destination.

If proxy credentials can't be got from browser as it seems, fix might be a gnashrc directive (comment #2), even multiple to support complex configurations.

Gabriele Giacone <gg0>
Group Member
Thu 05 Jul 2012 09:52:31 AM UTC, comment #7: 

Did you look at "master" as of 30 Oct 2010, as referenced by comment #5 ? The comment suggests support was added at that time.

Sandro Santilli <strk>
Group Member
Wed 04 Jul 2012 10:56:34 PM UTC, comment #6: 

see http://lists.gnu.org/archive/html/gnash-dev/2012-07/msg00000.html

Proxy with authentication doesn't work

A workaround is exporting http_proxy=http://<user>:<password>@<proxy>:<proxyport> then fire the browser up.

Gabriele Giacone <gg0>
Group Member
Fri 29 Oct 2010 11:25:15 PM UTC, comment #5: 

Support for proxy was actually added in git master.

Sandro Santilli <strk>
Group Member
Thu 02 Jul 2009 01:05:44 PM UTC, comment #4: 

The gnash plugin runs inside firefox, so could extract those configurations and set the corresponding environment variables before firing the standalone gnash.

Sandro Santilli <strk>
Group Member
Thu 02 Jul 2009 12:59:09 PM UTC, comment #3: 

Surely gnash plugin should use exactly the same settings as Firefox, regardless of any environment variable? If you change your firefox settings you want it to update gnash straight away.

Also, will gnash support authenticated proxies? I'm behind one at work and it causes lots of problems, especially due to the fact that there's an @ in the usernames... but this is fairly common in corporate environments, so it would be great if gnash could cope  :o)

Funkster <funkster>
Mon 01 Jun 2009 08:13:34 AM UTC, comment #2: 

The simpler way for this would be using an environment variable
so the plugin code can set it after looking at browser setting (if possible).

A gnashrc directive would also be nive for proxy.

Sandro Santilli <strk>
Group Member
Mon 01 Jun 2009 06:49:12 AM UTC, comment #1: 

Patch welcome. I doubt that this has high priority at the moment; if you want security for now, disable flash plugins.

Benjamin Wolsey <bwy>
Group Member
Mon 01 Jun 2009 12:22:06 AM UTC, original submission:  

since i'm not sure whether this is a bug or a feature i claim that a privacy-aware browser-plugin as gnash aims to be cannot afford such slip.

the only way preventing a cirumvention is to modify .gnashrc and .gnashpluginrc setting: "set localHost true" "set localDomain true" (which by the way won't let gnash connect to any website anymore).

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by gg0 (Posted a comment)
  • -email is unavailable- added by gg0
  • -email is unavailable- added by funkster (Posted a comment)
  • -email is unavailable- added by funkster (Voted in favor of this item)
  • -email is unavailable- added by strk (Posted a comment)
  • -email is unavailable- added by bwy (Posted a comment)
  •  

    There are 50 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 10 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-07-05 gg0 Summarymozilla-gnash-plugin circumvents firefox proxy-settings mozilla-gnash-plugin circumvents firefox proxy-settings
    2012-07-04 gg0 StatusFixed Confirmed
        Open/ClosedClosed Open
        Carbon-Copy- Added -email is unavailable-
    2010-10-29 strk StatusNone Fixed
        Assigned toNone strk
        Open/ClosedOpen Closed
    2009-07-02 funkster Carbon-Copy- Added funkster
    2009-06-01 bwy CategoryNone plugin
        Severity3 - Normal 2 - Minor

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code