Plugin Finder Service and Flash

[Christophe Jarry]

Dear developers and users,

I am trying to fix a freedom bug I have with galeon 2.0.6 web browser
on gNewSense metad: it proposes to download proprietary plugins [1]. The
problem seems to come from the Plugin Finder Service (PFS) in xulrunner
(version 1.9.0.19 here). More precisely, from the file
"browser/app/profile/firefox.js", at this line:

  pref("pfs.datasource.url","https://pfs.mozilla.org/plugins/
  PluginFinderService.php?mimetype=%PLUGIN_MIMETYPE%&appID=%APP_ID%
  &appVersion=%APP_VERSION%&clientOS=%CLIENT_OS%
  &chromeLocale=%CHROME_LOCALE%&appRelease=%APP_RELEASE%");

Looking at IceCat's code, that line has been replaced by this one:

  pref("pfs.datasource.url","http://gnuzilla.gnu.org/plugins/
  PluginFinderService.php?mimetype=%PLUGIN_MIMETYPE%&appID=%APP_ID%
  &appVersion=%APP_VERSION%&clientOS=%CLIENT_OS%
  &chromeLocale=%CHROME_LOCALE%&appRelease=%APP_RELEASE%");

In my attempt to fix that freedom bug, I successfully built a .deb
package by merging SVN IceCat changes [2] to xulrunner-1.9.0.19 source
code I got from debian [3]. I then replaced xulrunner on my system with
my packaged version. I reinstalled Galeon which now uses my packaged
version of xulrunner but still have the freedom bug. Below are some of
the issues I encounter.

1. If I visit
http://www.youtube.com/watch?v=xGlfUhtB02I&feature=hp_SLN_curated&list=SL,
the "plugin popup" appears and a click on "OK" redirects to
http://plugindoc.mozdev.org/winmime.html?application/x-shockwave-flash,
which is a blank page. Its source code reads:

  <?php
  $input = $_SERVER['REQUEST_URI'];
  {
  $var = str_replace(html, 'php', $input);
  header("HTTP/1.1 301 Moved Permanently");
  header("Location: http://plugindoc.mozdev.org$var";);
  
  }
  ?> 

2. If I visit http://www.adobe.com/software/flash/about/, the "plugin
popup" redirects me to
http://get.adobe.com/flashplayer/?application/x-shockwave-flash this
time.

I think users should always be redirected to
http://www.gnu.org/software/gnash/ instead.

Moreover, I would like to know if IceCat users have the same (1. and
2.) problems that I have.

Christophe

[1] http://savannah.nongnu.org/bugs/?30027
[2] svn://svn.savannah.gnu.org/gnuzilla/trunk/icecat
[3]
http://security.debian.org/debian-security/pool/updates/main/x/xulrunner/