Re: NPAPI-based features in LO

On 11.12.2015 11:35, Stephan Bergmann wrote:
> On 06/05/2014 12:57 PM, Michael Stahl wrote:
> > regarding (2) the problem is that users could have created documents
> > that contain embedded plug-ins, and if the feature is removed then those
> > documents are effectively broken.
>
> Yeah, see <https://bugs.documentfoundation.org/show_bug.cgi?id=62381> 
> "CRASH when select slide with NPAPI plug-in object in Slides pane" for a 
> reference to a real-world document that embedded PDFs into Impress slides.
>
> So what we should provide LO users with is easy access to the URL of the 
> plugin content that cannot be displayed, e.g., by displaying some 
> "content not available" icon and a hyperlink.  (This would not only be 
> useful after we remove NPAPI support, but also today when a relevant 
> plugin cannot be found or refuses to work with LO's dated NPAPI 
> implementation.)

the only NPAPI plugin that matters for LO is Adobe Flash, which will no
longer be updated with security fixes come March 2017, so we should
remove NPAPI for security reasons alone no later than in 5.3.

http://blogs.adobe.com/flashplayer/2012/02/adobe-and-google-partnering-for-flash-player-on-linux.html

i see that Rene has already uploaded a patch to remove the NPAPI plugins
https://gerrit.libreoffice.org/#/c/20658/

guess we should put the topic on the ESC agenda.