Bug#748342: iceweasel: please keep sandbox code for EME/CDM DRM plugins out of Iceweasel builds

[Martin Steigerwald]

Am Freitag, 16. Mai 2014, 20:22:09 schrieb Mike Hommey:
> On Fri, May 16, 2014 at 12:38:46PM +0200, Martin Steigerwald wrote:
> > Package: iceweasel
> > Version: 29.0.1-1
> > Severity: normal
> > Tags: upstream
> > 
> > Dear Maintainer,
> > 
> > Mozilla unfortunately chose to support external DRM plugins by an
> > opensource sandbox for EME/CDM plugins[1][2].
> > 
> > Please keep this open source sandbox code out of Iceweasel builds once it
> > becomes available. As for reasons to do so please see [2][3].
> > 
> > Feel free to close the bug report with a statement of your intent to do
> > so.
> > 
> > If its not possible to remove the code easily, please at least disable it.
> 
> The code is not even in http://hg.mozilla.org/mozilla-central/, which
> means it's more than 3 months away from possibly reaching unstable.
> 
> There is nothing to disable, nothing to remove, nothing to be seen
> regarding what it's going to be.
> 
> Please refrain from using the *Bug* tracking system for currently
> entirely hypothetical bugs.

Mozilla Foundation is about to introduce a new way to load proprietary and 
potentially unsafe code within the browser.

To me thats a bug.

Thats why I open one with upstream as well[1].

Well, I will reopen this bug or open a new one should this code arrives within 
Firefox.


[1] Bug 1011459 - Please do not support EME, do not allow new proprietary CDM 
code in the browser 
https://bugzilla.mozilla.org/show_bug.cgi?id=1011459

Thanks,
-- 
Martin 'Helios' Steigerwald - http://www.Lichtvoll.de
GPG: 03B0 0D6C 0040 0710 4AFA  B82F 991B EAAC A599 84C7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20140516/f0f12e92/attachment-0001.sig>