Duplicate Remove Flash from XF: security warning on XenForo.com

[Alpha1]

Browsers like Firefox are blocking Adobe Flash and showing a security warning:
Firefox has prevented the unsafe plugin "Adobe Flash" from loading on xenforo.com

Meanwhile Facebook is calling on Adobe to kill Flash and states that its no longer a risk worth taking.

I suggest to remove Flash Uploader from XenForo and replace it with a html5 alternative.

 

[Amaury]

Might have been Windows Firefox only, then. Your OS hasn't gotten there yet.

 

[Martok]

Linux Firefox 39.0. It was not the default, I had to choose it.

According to this, Firefox on Linux is only supported by Adobe Flash Player 11.

Adobe - Flash Player

 

[Snog]

According to this, Firefox on Linux is only supported by Adobe Flash Player 11.

Adobe - Flash Player

That's what it shows. 11.2.202.481

 

[Amaury]

I'm sure it will get fixed and, which to be fair to Adobe it often is the case, in a timely fashion.

And look at that, a patch has been released, it looks like. 18.0.0.209 is now available.

 

[lol768]

There is a duplicate suggestion relating to this.

I believe the vulnerability has been patched in recent Flash updates. Otherwise you can disable the flash uploader in your preferences for now.

This doesn't seem to remove the message bar: https://i.imgur.com/Qotoq84.png (I refreshed the page and saved the settings).

That said, it's easy enough to update Flash which is what I'll be doing.

 

[Amaury]

Make sure you're running the latest version of Flash: 18.0.0.209. I'm not getting that bar.

 

[lol768]

Make sure you're running the latest version of Flash: 18.0.0.209. I'm not getting that bar.

Latest version for me is actually 11.2.202.491.

The banner doesn't appear when I update flash to use the above version (as expected) - my point is moreso that toggling off the flash uploader doesn't seem to stop flash being loaded/used on the site (otherwise the banner wouldn't have appeared when I was using the outdated version).

 

[rafass]

The version 45.0.1 is showing that all the time.

 

[Mike Edge]

It saddens me that almost a year later, xF still has not moved to HTML5 from Flash.. I really expected it as a surprise in 1.5.

 

[Chris D]

It's not a trivial thing to implement and considering our aims with XF2 it's not something we especially want to implement twice.

The solution however is simple. Disable the Flash uploader yourself. I can't even remember the last time I needed to upload more than one image at a time. You could re-enable it if there comes a time you need to upload multiple files.

Should you regularly upload multiple files on your own board, an add on is available that may help.

 

[rafass]

omg, even with this option disabled:

I'm still seeing that warning in firefox.

 

[Chris D]

Then Firefox is being ridiculous.

Either way, can't you just click "Allow and Remember"?

 

[Mike]

If that's not a reference to here, that has been changed in 1.5.6 (https://xenforo.com/community/threads/xenforo-1-5-6-released.112942/#post-1041742). If it is a reference to here, then it's not something I've reproduced when I was testing this in the past (nor just now).

 

[rafass]

Mm, then that's the problem [?] (my version). I'm still using 1.5.4

Some of the bugs fixed in 1.5.6 include:
[...]
Don't attempt to create a Flash object to workaround a Firefox issue unless the Flash uploader is enabled.
https://xenforo.com/community/threads/xenforo-1-5-6-released.112942/

 

[Snog]

Then Firefox is being ridiculous.

Either way, can't you just click "Allow and Remember"?

This does work. I've done it.

But, Firefox seems to be on a mission to completely eliminate Flash. Chrome has no problems.

 

[Amaury]

Shouldn't really be using an outdated version of any plugin, honestly. Always keep everything up-to-date.