Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-27723

Multimedia Macro in Confluence causes Certificate Error in IE, if Quicktime Plugin is not installed

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Fix
    • Low
    • None
    • 4.2, 4.2.12
    • None

    Description

      Steps to Reproduce

      1. Setup a SSL protected Confluence
      2. Attach a mp4 file to a page, and use the multimedia macro to display the mp4 file
      3. Navigate to that page with IE (in an environment that does not have Quicktime installed, so that IE will fall back to using Windows Media Player to play the file)

      This will show a certificate error in IE on the first attempt to view the page.

      So far, we've only seen this affecting mp4 files. We suspect that the following lines are causing the issue:

      <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" codebase="https://www.apple.com/qtactivex/qtplugin.cab" data="https://www.example.com/download/attachments/30671645/sample_mpeg4.mp4" height="200" type="video/mp4" width="200">
                      <param name="autostart" value="false">
                           <param name="autoplay" value="false">
                           <param name="controller" value="true">
                           <param name="data" value="/download/attachments/30671645/sample_mpeg4.mp4">
                           <param name="src" value="/download/attachments/30671645/sample_mpeg4.mp4">
                           <param name="type" value="video/mp4">
                       <embed autostart="false" autoplay="false" controller="true" height="200" src="https://www.example.com/download/attachments/30671645/sample_mpeg4.mp4" type="video/mp4" width="200">
          </embed>
      </object>
      

      You can also copy and paste the code above into a text file, and name it as smth.html. Then put the file in your ConfluenceInstallationDirectory/confluence folder. Navigate to it via https://<yourConfluenceURL>/smth.html , and you will be able to reproduce the issue. Removing codebase="https://www.apple.com/qtactivex/qtplugin.cab", however, will get rid of the issue. Give that a try. We need to get rid of that codebase parameter in the multimedia macro to avoid this.

      Attachments

        Issue Links

          Activity

            People

              shaffenden Steve Haffenden (Inactive)
              fsim Foo Sim (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: