Firefox switches off plugins - except Flash

Mozilla has released a preview of Firefox's new plugin blocking system - although Flash will be allowed to keep running by default.

The browser developer said earlier this year that it would stop plugins - such as QuickTime or Java - from running until getting users' approval via a new click-to-play feature.

Google Chrome will take a similar approach starting next year, while Microsoft banned many plugins from playing without permission in Internet Explorer on Windows 8.

In the latest version of Firefox Aurora, the preview version of the browser, Firefox will no longer turn on most plugins by default, asking users whether to enable them.

"Even though many users are not even aware of plugins, they are a significant source of hangs, crashes and security incidents," said engineering manager Benjamin Smedberg, in a post on the Mozilla blog. "By allowing users to decide which sites need to use plugins, Firefox will help protect them and keep their browser running smoothly."

The one exception will be Flash, which will remain turned on by default - as it will in Chrome and IE.

"Flash content is so common on the web, and many websites use 'hidden' Flash instances that the user does not see and cannot click on: making Flash click-to-play would be confusing for most users," said Smedberg. "Users with older versions of Flash that are known to be insecure will see the click-to-activate UI and will be prompted to upgrade to the latest version."

Rather than have users turn on each individual plugin on a page, click-to-play will approve all plugins for that site - meaning they're either all on or all off. However, those who want to approve each instance can still install a Firefox extension to do so.

Call to developers

Smedberg called for developers to stop using plugins, saying features such as video and animation can run directly within the browser via technologies such as WebGL or WebRTC.

"Plugins are now a legacy technology, and not available on most mobile devices," he noted. "Mozilla encourages website developers to avoid using plugins wherever possible."

He said Mozilla would prioritise development on any features that can at the moment only be offered via a plugin rather than directly in-browser, asking developers to let the company know which are needed.

This article originally appeared at pcpro.co.uk