Author: gmaxwell
Description:
Because of the java security policy cortado is unable to fetch remote video files. OggHandler enabled sites play instant commons video fine for video tag users but fails ungracefully for cortado: Clicking play just makes the player vanish and nothing happens.
Ogghandler should probably attempt to always use cortado from the same hostname as the media file. Failing that it should simply act as though Java were not available.
Version: unspecified
Severity: normal
Would signing the jar allow it to go around same origin policies and thus fix this bug?
gmaxwell wrote:
Only in exchange for a nasty security warning (since, after all, if you sign it and the user accepts the sig they are giving it run of their machine). If thats done, it should only be done for cases(??) where the unsigned jar will not work.
There is a centrally maintained and signed jar of cortado on theora.org (since the permission is cached using the central copy has some benefits).
The ideal way to handle this is probably to do an iframe export for things that don't render to simple images.
The actual hosting site (Commons in this case) can provide an iframe-friendly embedding view, which encapsulates any JS library & java applet loading that may be needed to make the actual video play.
This also keeps the receiving site from needing to know anything about how the files actually work, just as you don't need to know what SVG or TIFF or PDF renderer is being used -- you only need to know that they give you a thumbnail image URL that will be in a format that a browser can display.
See also bug 25854 (expose oEmbed embedding API for media files), which dovetails nicely with the iframe-style export. (Standard oEmbed has you ship around a chunk of HTML for the foreign site to use directly, but ideally this is just the <iframe> element pointing at our embeddable page.)
Starting to collect some notes for further work at [[mw:Requests for comment/Refactor on File-FileRepo-MediaHandler]].
The OggHandler extension is not under active development anymore. It is unlikely that there will be any further active development.
OggHandler has been superseded by TimedMediaHandler:
http://www.mediawiki.org/wiki/Extension:TimedMediaHandler
Please use TimedMediaHandler instead.
Closing this report as WONTFIX as part of Bugzilla Housekeeping.
Please feel free to reopen this bug report in the future if either anyone takes the responsibility for active development of OggHandler again; or move this bug report from the "OggHandler" to the "TimedMediaHandler" component in Bugzilla if the same problem still happens when using TimedMediaHandler. Thanks.