search

hoyois / clicktoplugin

Prevents plug-ins from loading automatically in Safari
http://hoyois.github.com/safariextensions/clicktoplugin/
228 stars 44 forks source link

clicktoplugin not compatible with google hangouts (without extra config) #156

Open r-owen opened 8 years ago

r-owen commented 8 years ago

With ClickToPlugin installed I find that google hangouts fails: it tells me the necessary plugins need to be given permission, but Safari doesn't ask me to allow permission. I have worked around the problem by adding this ClickToPlugin's Control Lists preference panel:

Allow plugins on these sites: hangouts.google.com plus.google.com

however, this is a bit heavy-handed because it enables all plugins instead of just the few needed for hangouts. So this is a request to offer a way to enable specific plugins for specific sites and/or make ClickToPlugin support google hangouts by default.

Note that this google page has a link for joining a test hangout (though it uses plus.google.com instead of hangouts.google.com, which is what my normal hangouts use): [https://support.apu.edu/entries/99342956-How-to-get-setup-on-Google-Hangouts]

Thank you for this wonderful Safari extension. I can hardly imagine browsing without it.

hoyois commented 8 years ago

You can get much finer whitelisting using the "Allow plug-ins from these sources" list instead. This matches the URLs of the plugin objects themselves (which you can find by looking at the page source or enabling the "Block plug-ins manually" option).

You can also have the extension ignore the Google Talk plugin. This seems like the most efficient solution, since presumably there's no reason to ever block this plugin.

r-owen commented 8 years ago

Thank you.

For the record, if I block manually I see two things that could be blocked:

Plug-in: Google Talk Plugin Location: https://plus.google.com/hangouts/_/apu.edu/field-ed-youth Source: Position: (0,0) Size: 1×1

Plug-in: Google Talk Plugin Video Renderer Location: https://plus.google.com/hangouts/_/apu.edu/field-ed-youth Source: Position: (0,0) Size: 1×1

I tried putting "https://plus.google.com/hangouts/_/apu.edu/field-ed-youth" into the "Allow plugins from these sources" list, but (no surprise) it didn't work. I assume more info is required, but I'm not sure how to figure out what it might be.

I am reluctant to allow the two Google Talk plugins globally since I don't want to give badly behaved or hacked web sites access to my microphone or video camera. I feel safer allowing Google to use all my plugins.

What I'd really like is to be able to say "the following web site(s) can use the following specific plugins", but I realize that's not presently possible.

Or I could just run Chrome when I want to use hangouts, which was my solution until I found the workaround.

hoyois commented 8 years ago

Some plugins work without a source. It makes sense that Google Talk works this way, actually. I think this also means that the kind of hacking you're afraid of is simply not possible.

I tried putting "https://plus.google.com/hangouts/_/apu.edu/field-ed-youth" into the "Allow plugins from these sources" list, but (no surprise) it didn't work. I assume more info is required, but I'm not sure how to figure out what it might be.

That would have to go in the locations whitelist.