Re: [Mozilla Enterprise] Flash Allow List

[Chris Peterson]

I don't think Firefox supports Windows Group Policy, but you can change 
Flash from "Ask to Activate" to "Always Activate" by setting the 
about:config pref "plugin.state.flash" to "2". (Pref value 1, the 
default, is "Ask to Activate" and 0 is "Never Activate".)

chris

On 2017-08-21 12:24 PM, John Mayers wrote:

Hi Chris,

Just following up.  Is there any group policy that can be enabled to 
set the Flash plugin to Always Activate?

-John

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com <mailto:jmay...@cainc.com>

T: 978-339-4340  |  C:  978-808-9451

Twitter <https://twitter.com/curriculumassoc>  | Facebook 
<https://www.facebook.com/curriculumassociates>  | LinkedIn 
<https://www.linkedin.com/company/464988?goback=%2Efcs_GLHD_curriculum+associates>

––––––––––––––––––––––––––––––––––––

Our programs: Ready 
<http://www.curriculumassociates.com/products/ready-common-core.aspx>® 
<http://www.curriculumassociates.com/products/ready-common-core.aspx>  | 
i-Ready® 
<http://www.curriculumassociates.com/products/iready/diagnostic-instruction.aspx>  | 
BRIGANCE® 
<http://www.curriculumassociates.com/products/BRIGANCEoverview.aspx>

––––––––––––––––––––––––––––––––––––

/New i-Ready systems requirements are *_here 
<http://www.i-ready.com/support/i-ReadySystemRequirements.pdf>_*!/__

*From:*John Mayers
*Sent:* Friday, August 18, 2017 1:31 PM
*To:* 'Chris Peterson' <cpeter...@mozilla.com>; 
plugin-blocking-by-dom...@mozilla.com
*Cc:* 'Benjamin Smedberg' <bsmedb...@mozilla.com>
*Subject:* RE: Flash Allow List

Hi Chris,

Thank you for this feedback.  We are actually releasing an edition of 
i-Ready on Sunday that will have this detection in place for all 
browsers.  Users will be able to “self-help” themselves when they 
encounter Flash blocked by default.

In all of my research, I have yet to find a domain level policy that 
can be added to set Firefox to always “click to activate” either all 
together, or for specific sites.  If you know of a way, please let us 
know.

Thank you,

*John Mayers*  | * Technical Solutions Engineer*

Curriculum Associates  | jmay...@cainc.com <mailto:jmay...@cainc.com>

T: 978-339-4340  |  C:  978-808-9451

Twitter <https://twitter.com/curriculumassoc>  | Facebook 
<https://www.facebook.com/curriculumassociates>  | LinkedIn 
<https://www.linkedin.com/company/464988?goback=%2Efcs_GLHD_curriculum+associates>

––––––––––––––––––––––––––––––––––––

Our programs: Ready 
<http://www.curriculumassociates.com/products/ready-common-core.aspx>® 
<http://www.curriculumassociates.com/products/ready-common-core.aspx>  | 
i-Ready® 
<http://www.curriculumassociates.com/products/iready/diagnostic-instruction.aspx>  | 
BRIGANCE® 
<http://www.curriculumassociates.com/products/BRIGANCEoverview.aspx>

––––––––––––––––––––––––––––––––––––

/New i-Ready systems requirements are *_here 
<http://www.i-ready.com/support/i-ReadySystemRequirements.pdf>_*!/__

*From:*Chris Peterson [mailto:cpeter...@mozilla.com]
*Sent:* Friday, August 18, 2017 1:25 PM
*To:* John Mayers <jmay...@cainc.com <mailto:jmay...@cainc.com>>; 
plugin-blocking-by-dom...@mozilla.com 
<mailto:plugin-blocking-by-dom...@mozilla.com>
*Subject:* Re: Flash Allow List

Hi John, Firefox does not have a whitelist of sites that can load 
Flash without user action ("click to activate"). When users load your 
site, they will either see the "Activate Adobe Flash" UI in the web 
page (if the Flash content's dimensions are large enough) or a tiny 
plugin icon in the address bar (for Flash "pixels" that are too small 
for the UI).

I recommend that you add a check for Flash being installed and 
activated. If Flash is installed but not activated automatically, your 
page can show instructions guiding users to click the "Activate Adobe 
Flash" and "Allow and Remember" buttons. A dedicated workflow like 
this to test for click-to-activate is probably more user friendly and 
reliable than just loading your regular Flash content and hoping users 
see and click the "Activate Adobe Flash" when your Flash content 
doesn't show up.

In Firefox, Flash in click-to-activate mode will still be detectable 
by JavaScript in the navigator.plugins[] array (i.e. 
navigator.plugins["Shockwave Flash"]). Your JavaScript can detect that 
Flash is installed but not activated by embedding a Flash <object> 
that reports whether it is running or not by setting some JavaScript 
variable using Flash's ExternalInterface. I don't know if someone has 
already written a JavaScript+Flash library that already handles this 
click-to-activate, but I would love to know. In Chrome, however, Flash 
in click-to-activate mode will NOT be detectable in the 
navigator.plugins[] array, so JavaScript can't differentiate between 
Flash not be installed from installed-but-not-activated for this site.

thanks,

*From:* Benjamin Smedberg [mailto:bsmedb...@mozilla.com]
*Sent:* Friday, August 18, 2017 1:24 PM
*To:* John Mayers <jmay...@cainc.com <mailto:jmay...@cainc.com>>
*Cc:* plugin-blocking-by-dom...@mozilla.com 
<mailto:plugin-blocking-by-dom...@mozilla.com>
*Subject:* Re: Flash Allow List

John, thank you for reaching out. Firefox does not intend to implement 
any whitelist of sites. I believe it is possible for enterprise sites 
to configure a whitelist for their individual deployment; for more 
information about that I would suggest posting on the Mozilla 
enterprise mailing list: https://mail.mozilla.org/listinfo/enterprise 
<https://urldefense.proofpoint.com/v2/url?u=https-3A__mail.mozilla.org_listinfo_enterprise&d=DwMFaQ&c=0i6vPcfBD4A2UCOW2UOV9gFNZGFhViJzZW4aaAjp7gA&r=TTxwTsYblOEtqK3f82AjgusCNpp5oIY4LPsE7SxEyrs&m=kZE776_vMhiCFbOAvAKXW4z1A_SPZnjZY8FyJN8VuI4&s=ITA1QXWwW9C1vTCjdw7vTp57t3tNx7-mD6Tgsw4PCjU&e=>

--BDS

On 2017-08-18 9:59 AM, John Mayers wrote:

    Good Afternoon,

    I work for an online instruction and diagnostic company called
    i-Ready. We serve millions of kids across the US.  Our site
    currently is about 50% Flash, 50% HTML5.  We will be off Flash
    completely by August 2018.  In the interim, is there someone I can
    talk to about getting our domains added to a “whitelist” for Flash
    for Firefox?

    Thank you,

    *John Mayers*  | * Technical Solutions Engineer*

    Curriculum Associates  | jmay...@cainc.com <mailto:jmay...@cainc.com>

    T: 978-339-4340  |  C:  978-808-9451

    Twitter
    
<https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_curriculumassoc&d=DwMDaQ&c=0i6vPcfBD4A2UCOW2UOV9gFNZGFhViJzZW4aaAjp7gA&r=TTxwTsYblOEtqK3f82AjgusCNpp5oIY4LPsE7SxEyrs&m=hSVuX1Zkv1gqRxyyVr33wUAxVh9vyCF6t5s-LFK7uGE&s=ypipFIezdxH7tvOOBBIN40mBqvTSbF2PGtqlJHwDOk4&e=>
  |
    Facebook
    
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.facebook.com_curriculumassociates&d=DwMDaQ&c=0i6vPcfBD4A2UCOW2UOV9gFNZGFhViJzZW4aaAjp7gA&r=TTxwTsYblOEtqK3f82AjgusCNpp5oIY4LPsE7SxEyrs&m=hSVuX1Zkv1gqRxyyVr33wUAxVh9vyCF6t5s-LFK7uGE&s=6zEGA70QQwXyJGcW9DtGJnD9ZCYDYwKLITddvOng38A&e=>
  |
    LinkedIn
    
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.linkedin.com_company_464988-3Fgoback-3D-252Efcs-5FGLHD-5Fcurriculum-2Bassociates&d=DwMDaQ&c=0i6vPcfBD4A2UCOW2UOV9gFNZGFhViJzZW4aaAjp7gA&r=TTxwTsYblOEtqK3f82AjgusCNpp5oIY4LPsE7SxEyrs&m=hSVuX1Zkv1gqRxyyVr33wUAxVh9vyCF6t5s-LFK7uGE&s=RXNQ-jna9q5b8MEsdgxMe3tOb64hW95piNg0heKfv8Q&e=>

    ––––––––––––––––––––––––––––––––––––

    Our programs: Ready
    <http://www.curriculumassociates.com/products/ready-common-core.aspx>®
    <http://www.curriculumassociates.com/products/ready-common-core.aspx>  |
    i-Ready®
    
<http://www.curriculumassociates.com/products/iready/diagnostic-instruction.aspx>
  |
    BRIGANCE®
    <http://www.curriculumassociates.com/products/BRIGANCEoverview.aspx>

    ––––––––––––––––––––––––––––––––––––

    /New i-Ready systems requirements are *_here
    <http://www.i-ready.com/support/i-ReadySystemRequirements.pdf>_*!/

    -- 
    You received this message because you are subscribed to the Google
    Groups "Plugin Blocking By Domain" group.
    To unsubscribe from this group and stop receiving emails from it,
    send an email to plugin-blocking-by-domain+unsubscr...@mozilla.com
    <mailto:plugin-blocking-by-domain+unsubscr...@mozilla.com>.
    To post to this group, send email to
    plugin-blocking-by-dom...@mozilla.com
    <mailto:plugin-blocking-by-dom...@mozilla.com>.
    To view this discussion on the web visit
    
https://groups.google.com/a/mozilla.com/d/msgid/plugin-blocking-by-domain/DM3PR16MB08292D1328FDBB914BA58728A8800%40DM3PR16MB0829.namprd16.prod.outlook.com
    
<https://groups.google.com/a/mozilla.com/d/msgid/plugin-blocking-by-domain/DM3PR16MB08292D1328FDBB914BA58728A8800%40DM3PR16MB0829.namprd16.prod.outlook.com?utm_medium=email&utm_source=footer>.


_______________________________________________
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"