swfdec-mozilla stores privacy sensitive files

[crf]

Binary package hint: swfdec-mozilla

The swfdec-mozilla flash plugin stores site specific files in ~/.config/swfdec-mozilla.conf
This is a privacy concern, as users may not expect information to be stored in this way, and it isn't obvious how to find, delete or edit it.

This bug is analogous to bug 162045.

Workarounds found in the links in that bug (such as extensions to firefox which delete flash cookies) won't work with swfdec mozilla because it stores site info in a different way.

[Benjamin Otte (Company) (otte)]

Swfdec does not store Flash cookies.

And the configuration file just stores user-set information - the sound and autoplay settings you get in the right-clock menu - and not anything site specific.

[crf (chrisfahlman)]

It is, in fact, storing site specific settings. Eg, from my file:

[www.nhl.com]
autoplay=true

[global]
autoplay=false

[www.youtube.com]
autoplay=true

[s.ytimg.com]
autoplay=true