dslreports logo
 
    All Forums Hot Topics Gallery
spc
uniqs
24

therube
join:2004-11-11
Randallstown, MD

1 recommendation

therube to chachazz

Member

to chachazz

Re: Warning: 0-Day vulnerability in Java 7

quote:
Lastly, starting this week in Aurora and Beta we’ll begin adding the components of click-to-play, a Firefox security control that helps protect users against outdated and vulnerable plugins. We anticipate this new security feature to be fully operational by Firefox 18.

Note that currently, Java blockage looks to be broken in NoScript, in Aurora/Beta, so do not count on that.
You can enable (the Mozilla preference) plugins.click_to_play in about:config.
redwolfe_98
Premium Member
join:2001-06-11

redwolfe_98

Premium Member

said by therube:

Note that currently, Java blockage looks to be broken in NoScript, in Aurora/Beta, so do not count on that.
You can enable (the Mozilla preference) plugins.click_to_play in about:config.

therube, do you think that the problem with noscript's not blocking "java" is only when using "noscript" with "aurora", which, i assume, is a beta version of "firefox"? or, is "noscript" not blocking "java" at all, regardless of which version of "firefox" one is using? or, you don't know?

therube
join:2004-11-11
Randallstown, MD

1 edit

therube

Member

Aurora, so Firefox 17.
I haven't actually looked at FF 16.
I did look at FF 15.0, & it is working as expected with that.

Edit:

I had an older (July 12) version of 16, & it is working there.
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/16.0 Firefox/16.0

Though don't know if that is still the case with a more recent build?

Edit2:

And working here also:
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20120827 Firefox/16.0
therube

therube

Member

> currently, Java blockage looks to be broken in NoScript, in Aurora/Beta

Fixed in the latest development build.

v 2.5.4rc1 (now up to rc2)
=========================================================================
x Fixed placeholder sizes messed up by changes in Gecko 17
x Work-around for broken content policy call for Java plugin on Gecko 17 and above