Flash video won't play Topic is solved

Talk about code development, features, specific bugs, enhancements, patches, and similar things.
Forum rules
Please keep everything here strictly on-topic.
This board is meant for Pale Moon source code development related subjects only like code snippets, patches, specific bugs, git, the repositories, etc.

This is not for tech support! Please do not post tech support questions in the "Development" board!
Please make sure not to use this board for support questions. Please post issues with specific websites, extensions, etc. in the relevant boards for those topics.

Please keep things on-topic as this forum will be used for reference for Pale Moon development. Expect topics that aren't relevant as such to be moved or deleted.
User avatar
badnick
Astronaut
Astronaut
Posts: 670
Joined: 2017-03-23, 19:56

Flash video won't play

Unread post by badnick » 2017-06-16, 20:52

This video does not play in PM even in clean profile but works in Firefox.
https://air.mozilla.org/webdev-beer-and-tell-june-2017/

PM 27.3.0 /64
Windows 10 / 64
Attachments
Screenshot (490).png
Screenshot (489).png
Windows 10 pro /64 (version 1809)
PM last/64

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35602
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Flash video won't play

Unread post by Moonchild » 2017-06-16, 21:44

If you look at the web console (a first thing you should do if you want to check what's going on when something isn't working), you would have seen this is a CSP+CDN issue. You should let Mozilla know that their CSP sources are not including cloudfront.net when it should, preventing the Flash part of JWPlayer from loading...

Workarounds: disable flash or disable CSP (not recommended)

Technical details:
Error:
Error: Content Security Policy: The page's settings blocked the loading of a resource at https://d132d9vcg4o0oh.cloudfront.net/v ... .flash.swf ("default-src https://air.mozilla.org").
Their CSP is:
script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net air.cdn.mozilla.net vid.ly s.vid.ly cf.cdn.vid.ly ssl.p.jwpcdn.com ssl.google-analytics.com d132d9vcg4o0oh.cloudfront.net 4844a951.fanoutcdn.com;
img-src 'self' data: vid.ly air.cdn.mozilla.net secure.gravatar.com jwpltx.com ssl.google-analytics.com mozillians.org https://i0.wp.com d3fenhwk93s16g.cloudfront.net;
default-src 'self';
style-src 'self' 'unsafe-inline' air.cdn.mozilla.net;
media-src 'self' blob: vid.ly mozillalives-i.akamaihd.net d3fenhwk93s16g.cloudfront.net;
child-src 'self' blob: vid.ly http://www.youtube-nocookie.com login.persona.org;
connect-src 'self' vid.ly mozillalives-i.akamaihd.net autocompeter.com 4844a951.fanoutcdn.com wss://4844a951.fanoutcdn.com d3fenhwk93s16g.cloudfront.net;
font-src 'self' data: air.cdn.mozilla.net cdn.jsdelivr.net ssl.p.jwpcdn.com
Since d132d9vcg4o0oh.cloudfront.net is only listed in "script-src", and a .swf file is not a script file (falling through to default-src as a result), it should not load. As such the flash player gets blocked and the video borks because JWPlayer defaults to Flash for us, apparently.
i.e.: Pale Moon is doing exactly what it is told to do.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
badnick
Astronaut
Astronaut
Posts: 670
Joined: 2017-03-23, 19:56

Re: Flash video won't play

Unread post by badnick » 2017-06-17, 06:05

Yes, indeed is working by disabling Flash. Thanks Moonchild!
Windows 10 pro /64 (version 1809)
PM last/64

LL25255252
Moon lover
Moon lover
Posts: 89
Joined: 2015-08-29, 03:44

Re: Flash video won't play

Unread post by LL25255252 » 2017-07-26, 23:08

Moonchild wrote:Workarounds: disable flash or disable CSP (not recommended)
Yes, these 2 workarounds work for me too.

I don't often visit flash based sites but as of now (Pale Moon 27.4.0) setting the Flash Plugin to "Ask for Activate" doesn't work in that mozilla URL. You get the "Flash Plugin fail to Load" message without getting the "Allow flash question".
So, @Moonchild, can you make PM popup the "Allow question" so that I won't have to disable flash for all sites :?:

Locked