Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • Tor Browser Tor Browser
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 859
    • Issues 859
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 9
    • Merge requests 9
  • Deployments
    • Deployments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • Repository
  • Wiki
    • Wiki
  • Activity
  • Graph
  • Create a new issue
  • Commits
  • Issue Boards
Collapse sidebar
  • The Tor Project
  • Applications
  • Tor BrowserTor Browser
  • Issues
  • #29904
Closed
Open
Issue created Mar 26, 2019 by Georg Koppen@gkDeveloper

NoScript blocks MP4 videos on "Safer" and "Safest" without click-to-play option

In legacy/trac#28720 (moved) a regression in NoScript for click-to-play videos got investigated and fixed. However, there seem to be more cases that are unresolved so far. Examples are:

https://justi.cz/security/2018/11/14/gvisor-lpe.html https://www.destroyallsoftware.com/talks/wat http://www.html5videoplayer.net/html5video/mp4-h-264-video-test/ https://camendesign.com/code/video_for_everybody/test.html

It seems to be related to MP4. I did not find an older NoScript WebExtensions version where this did work, so no regression range.

That's again easily reproducible in a vanilla Firefox 60 ESR, by making sure everything in NoScript is allowed but media and then visiting the above mentioned URLs.

Assignee
Assign to
Time tracking