Firefox 17 Launches With Click-to-Play Plugin Blocks
An anonymous reader writes "As expected, Mozilla on Tuesday officially launched Firefox 17 for Windows, Mac, and Linux. The biggest addition in this release is click-to-play plugins, announced back in October. In short, the addition means Mozilla will now prompt Firefox users on Windows with old versions of Adobe Reader, Adobe Flash, and Microsoft Silverlight (more will be added eventually)."
The release notes are available, as is a list of changes for devs. Firefox for Android got a new release as well (notes).
Apparently they have it in nightly builds now, but it hasn't trickled down to the main release channel quite yet. Bummer.
Warning: Contents May Be Flammable. Keep Out Of Reach Of Children.
I've ran the numbers through our compute cluster here at JPL and have determined that Firefox version numbers are on an exponential climb and will reach critical mass and achieve self awareness around the 20th or 21st of December THIS YEAR with the creation of a singularity on the entire planet's web browser population.
The Mayans knew... the Mayans knew...
As always, Opera did it first.
When I read the headline, "Click-to-Play Plugin Blocks", I was thinking that plugin content would be blocked from doing anything unless the user clicks a play button. Just like FlashBlock, in other words. That would actually be a good thing. A good change, in a new version of Firefox: I might've fainted.
But no, what it actually means is this:
> Mozilla will now prompt Firefox users on Windows with old versions of Adobe Reader...
Oh, yes, please.
We need this because Adobe Reader doesn't already prompt every single user who has it installed to the effect that they need to upgrade it, a bare minimum of three per hour. We definitely need our web browser to bug us about this also, otherwise we might not know that three new versions of Adobe Reader were released during the time it took us to download and install the version we currently have. Well, I mean, okay, in theory we'd _know_, but without this extra reminder we might occasionally go up to fifteen minutes at a time without _thinking_ about it. Mozilla must protect us from that horrific fate.
Cut that out, or I will ship you to Norilsk in a box.
which should release in about 3... 2... 1...
What I find more fascinating in TFA is that Firefox has added simple support for HTML5 Sandboxes. You can apparently specify whether the data inside the IFRAME is allowed to access outside domains, etc. (if I am reading it correctly; I am not actively involved in web design at the moment and so am a bit behind the curve; does anyone know how good this sandbox function is compared to other software/browsers?).
Notice that Firefox 17 is also an Extended Support Release, so if you are a fan of a more conservative update cycle, now is a good time to hop on the wagon.
Mozilla Firefox ESR Overview
I thought from the description that this would require clicking *all* Flash, Java or other plug-in applets before they would run. That would be true security (until the dumb masses find and click one they shouldn't). I thought this would be a relief for when I'm using a fresh copy of Firefox; I could possibly go a bit longer before installing Adblock, NoScript and the rest. But no... it only blocks this crap from loading without a click when an "old" version of a plug-in is used. Yay. Talk about pointless. So, AdBlock and NoScript still do it better, and this is no temporary holdover until the real plug-in can be installed.
Actually, this is possibly even worse. Once people find out that they can "block" annoying moving Flash ads that have sound by simply keeping their plug-ins out of date, they'll probably never want to update again. I know I wouldn't. So then when they do click to run a bad applet, they really are screwed.
No, click-to-play does what you think it does. Like FlashBlock. The Acrobat Reader prompts are an additional feature.
It supports both, the behaviour is configurable.
New things are always on the horizon
To enable click-to-play for all plugins go to about:config in the location bar and set “plugins.click_to_play” to true.
The feature is considered still under development which is why it's not enabled by default.