New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 791579 link

Starred by 9 users

Issue metadata

Status: Archived
Owner: ----
Closed: Dec 13
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 2
Type: Bug



Sign in to add a comment

Chrome downloads flash content (.swf) in place of running it

Reported by todayis...@gmail.com, Dec 4 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36

Example URL:
http://www.hbo.com//bin//hboPlayer.swf?vid=1086687

Steps to reproduce the problem:
1. Change chrome://settings->Advanced->Content Settings->Flash to "Ask First".
2. Try opening any .swf URL in the browser.
3. The .swf file gets downloaded.

What is the expected behavior?
Chrome to run the flash content, in place of downloading :)

What went wrong?
Hello, I found the cause and fix for the issue :)

The Chrome settings file, is not writing out the value when you save it :/

A code commit about 6 weeks back, changed when saving the setting, it is not saved to your preference file,  If you had the preference set before upgrading to a newer version of chrome there is no issues, as the loading / reading of the setting file code has not been changed.

Which is well suboptimal :)

I've tested on Windows 2012 Server / 7, 10, 32 and 64 bit versions with the most recent and older versions of chrome so this should fix them all :)

Your Chrome settings file is located here, you should exit chrome, and make a backup before editing.

In Windows: 
C:\Users\<username>\AppData\Local\Google\Chrome\User Data\Default\Preferences

In OS X: 
~/Library/Application Support/Google/Chrome/User Data/Default/Preferences

Open the file with a text editor:

Find the setting: "plugins": which apears after "permission_autoblocking_data" 

replace with this setting to enable flash player

"plugins": {"*,*": {"per_resource": {"adobe-flash-player": 1}}},

or if you want to replace the entire profile section in the setting file with a generic default one:

"profile" : {
		"avatar_index" : 26,
		"content_settings" : {
			"domain_to_origin_migration_status" : 1,
			"exceptions" : {
				"accessibility_events" : {},
				"app_banner" : {},
				"auto_select_certificate" : {},
				"automatic_downloads" : {},
				"autoplay" : {},
				"background_sync" : {},
				"bluetooth_guard" : {},
				"client_hints" : {},
				"cookies" : {},
				"durable_storage" : {},
				"geolocation" : {},
				"images" : {},
				"important_site_info" : {},
				"javascript" : {},
				"media_stream_camera" : {},
				"media_stream_mic" : {},
				"midi_sysex" : {},
				"mixed_script" : {},
				"notifications" : {},
				"password_protection" : {},
				"permission_autoblocking_data" : {},
				"plugins" : {
				"*,*" : {
				"per_resource" : {
					"adobe-flash-player" : 1
					}
					}
				},
				"popups" : {},
				"ppapi_broker" : {},
				"prompt_no_decision_count" : {},
				"protocol_handler" : {},
				"sensors" : {},
				"sound" : {},
				"ssl_cert_decisions" : {},
				"subresource_filter" : {},
				"subresource_filter_data" : {},
				"usb_chooser_data" : {}

			},
			"pref_version" : 1
		},
		"exit_type" : "Crashed",
		"exited_cleanly" : true,
		"icon_version" : 4,
		"last_engagement_time" : "13156449498380465",
		"managed_user_id" : "",
		"name" : "Person 1",
		"observed_time" : 7,
		"was_obsolete_http_data_cleaned" : true
	},

You can use the value of 1 to never ask you to run flash just do it :)  or 2 to prompt if you would like to run it :)

wish you well on your side of the screen,

-Eric

Does it occur on multiple sites: Yes

Is it a problem with a plugin? No 

Did this work before? Yes 

Does this work in other browsers? Yes

Chrome version: 62.0.3202.94  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 27.0 r0
 
Labels: Needs-Bisect
Components: -Blink Internals>Plugins>Flash
Cc: sc00335...@techmahindra.com
Labels: Triaged-ET Needs-Triage-M62 Needs-Feedback
Unable to reproduce this issue on reported version 62.0.3202.94 and on latest canary 65.0.3285.0 using windows 10 and Mac 10.13.1 using steps mentioned below. Attaching screencast for reference.

1. Launched chrome and navigated to chrome://settings.
2. Changed Advanced->Content Settings->Flash to "Ask First".
3. Navigated to http://www.hbo.com//bin//hboPlayer.swf?vid=1086687 and observed no download of flash content. Instead 404 page is seen.

@Reporter: Could you please check the video and let us know if we miss anything. And also please provide us alternate URL to check this as 404 page is seen. This would help in further triaging of the issue.

Thanks!
791579.mp4
1.5 MB View Download
Hello :)

Thanks for checking into this so quickly :) I made a mistake, hbo uses a regional ip based system to filter access, so not the best example :)

Please try either of these from the google network for the poc:

https://ipv4.google.com/a/help/intl/ar/admins/resources/flash/apps_setup.swf

https://static.googleusercontent.com/media/ipv4.google.com/en//a/help/intl/ar/admins/resources/flash/apps_setup.swf

I've attached a capture here showing the behaviour:

https://www.dropbox.com/s/7r0clvv1vzttazd/google_swf_download_poc.gif?dl=0

Wish you well on your side of the screen :)

-Eric 
Project Member

Comment 6 by sheriffbot@chromium.org, Dec 6 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "sc00335628@techmahindra.com" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: -Needs-Bisect M-65 OS-Linux OS-Mac
Status: Untriaged (was: Unconfirmed)
The option to set Flash to "Ask First" in chrome://settings->Advanced->Content Settings is introduced in M-62 milestone and from then the issue is seen.
This is a non-regression issue.
Hence, marking it as untriaged to get more inputs from dev team.

Thanks...!!
This issue was already somewhat confusingly brought up here:

https://bugs.chromium.org/p/chromium/issues/detail?id=767342

I have two identical copies of Chrome, current ver., one that can execute a link like:

http://www.hbo.com//bin//hboPlayer.swf?vid=1086687

and the second where it attempts to download it instead.


The browsers are 100% identical by the "current" settings options.  The difference is in what settings were set in PREVIOUS versions, and are no longer available.  The settings have been "LOCKED" in as the option to change them has been removed.


Eric is 100% correct here, and the manual editing of settings file makes sense as a workaround, since it is settings that can no longer be changed that are preventing the direct running of swf links with URL option arguments.

You will note in the other closed out thread, and other places discussing this disastrous oversight, that in particular Educational Software that needs rich content (FLASH) that HTML5 is incapable of supporting, that pass data (URL arguments), that Chrome needs to take this issue seriously as it follows its roadmap for removal of Flash.

Many companies are preparing for 01/01/2021 and the end of Flash, but Chrome is bringing that day forward to NOW, by not properly testing their roadmap against all real world use cases of Flash.
Re-iterating to make perfectly clear:
======================================

Any direct link to an .swf with URL arguments, CANNOT be run on the current version of Chrome.

The Ask First, Per-Site permissions, etc, stuff that is currently available DOES NOT WORK if there are URL arguments:

ie:     example.swf?arg=1

The above .swf example CANNOT be run on a clean install of Chrome.  No option that exists in current version can make it function, period.  Only upgraded copies of the current version, where old settings no longer available persist, can have it run properly.

This is the problem in its most precise form.

Comment 10 by lgr...@gmail.com, Dec 16 2017

What needs to be done, IMO:
1. Completely remove this hidden setting to always run Flash
2. If Flash is set to "Ask first" when navigating to a .swf URL, then ASK, do NOT download!
3. If the site is whitelisted, then run the .swf as usual. If the site is blacklisted or Flash is blocked, THEN (possibly) download.
It seems obvious the devs on this are just not going to acknowledge they screwed up because the number of users affected is small.

For those being dis-serviced by this, I suggest this solution if you are able to implement it:
============================================================

1.) Take your broken-by-chrome flash file:
http://broken-by-chrome.com/myGreatFile.swf?some=1&var=2

and convert it into a page that can rewrite the broken-by-chrome flashVars into a dynamically written Object/Embed style tag.

ie:
http://broken-by-chrome.com/FixWhatTheyDid.php?some=1&var=2


2.) Inside the "FixWhatTheyDid.php", grab the URL variables ($_GET array) and WRITE them into the Embed Tag as the FlashVARS property.

-------------------------------------
<?php
    $fieldnames_actual = array();
    $values = array();

    foreach($_GET as $k=>$v){
        if($k!='fieldnames'){
            $fieldnames_actual[] = $k;
            $values[] = $v;
            $flashArray[$k]=$v;
            if($flashVarString==""){
                $flashVarString=$k."=".$v;
            }
            else{
                $flashVarString.="&".$k."=".$v;
            }
        }
    }  
?>

<html something something>
<some more somethings>
<flash embed comes next>
<object>
   <param ...>
   <param ...>
   <param etc>
   <param name=FlashVars value="<?php echo $flashVarString; ?>" /> 
   <param ...>
   <embed src="myGreatFile.swf" otherArguments...>
</object>

-------------------------------------------------------



This should allow you to fix what Chrome broke, by only changing the targeted .swf, and if you CANT change that, you can still do what I said above, and create a "redirect" on your server, that will catch and repoint it from the targeted .swf to your "catch" file which can then load as shown above.

This will bypass Chrome's screw up.

Comment 12 by lgr...@gmail.com, Dec 17 2017

There's over 50 stars on this duplicate that got swept under the rug:
https://bugs.chromium.org/p/chromium/issues/detail?id=767342
Would like someone to fix this. I need flash to run in my browser.

Comment 14 by lgr...@gmail.com, Mar 12 2018

Yes, the behavior is wrong, but I think they're just going to run out the clock on this one until Flash is removed.
Hello!
This bug is receiving this notice because there has been no acknowledgment of its existence in quite a bit of time.
- If you are currently working on this bug, please provide an update.
- If you are currently affected by this bug, please update with your current symptoms and relevant logs.

If there has been no updates provided by EOD Wednesday, 12/12/18 (5pm EST), this bug will be archived and can be re-opened at any time deemed necessary.

Thank you!
Status: Archived (was: Untriaged)
Due to lack of action this bug has been Archived. If work is still being done on this issue or you are still experiencing this issue please feel free to re-open with the appropriate information.

Sign in to add a comment