NoOp wrote:
On 07/20/2011 10:15 AM, Dick Hoffman wrote:
David E. Ross wrote:
...
See problem #672665 in Bugzilla.
Dick
Thanks. I added it to my "watch list".
Problem #672665 has been marked "Closed Duplicate" because it duplicates
#512378. Apparently, some 2.x update of SM removed "Java-specific
preferences from the UI" but not all were actually removed, so the
resolution of 512378 and its duplicate(s) is to remove the rest of them.
This change has, it could be argued, security impacts, especially since
I thought I was disabling Java when all the preference did was toggle a
non-functional variable. I've searched the SM documentation in vain to
find where this change was noted. I'm sure it's there somewhere, I just
don't have the smarts to find it. Certainly not another example of
developer arrogance.
Dick
I tracked it back to this:
https://bugzilla.mozilla.org/show_bug.cgi?id=506985
[Bug 506985 - remove java-specific preferences from Firefox UI, hidden
prefs ]
Looks like the option to disable/enable java was removed in Firefox 3.6
forward. And the Firefox solution:
<https://support.mozilla.com/en-US/kb/How%20to%20turn%20off%20Java%20applets>
Use the addons manager.
My wife points out this change has further security implications
depending on how it was implemented. Did the update that changed the
Enable/Disable of Java to the Add-ons Manager take into consideration
the user's current preference setting or did it take a default and, if
so, was the default Enable or Disable? If it took a default of Enable
there could be other chumps like me out there thinking they've got Java
disabled when they really don't.
Dick
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey
