[Webkit-unassigned] [Bug 39219] New: Offer user option to override sandbox plugin flag

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=39219

           Summary: Offer user option to override sandbox plugin flag
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://173.203.83.120/sandbox-bug
        OS/Version: Mac OS X 10.5
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: Frames
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: arturadib at gmail.com


When an iframe is sandboxed, WebKit is setting the "plugins browsing context flag", as per the HTML5 doc (http://www.whatwg.org/specs/web-apps/current-work/#sandboxed-plugins-browsing-context-flag).

However, no option is being offered for the user to override the flag.  According to the HTML5 doc (http://www.whatwg.org/specs/web-apps/current-work/#the-embed-element), if the sandboxed plugin flag is set:

"The user agent may offer the user the option to override the sandbox and instantiate the plugin anyway; if the user invokes such an option, the user agent must act as if the conditions above did not apply for the purposes of this element."

The absence of this option renders several plugin-based sites unusable, such as those with embedded YouTube videos (see example URL: http://173.203.83.120/sandbox-bug).

(Alternatively, perhaps WebKit can offer another sandbox option, like "allow-plugins"?)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.