NPAPI
Netscape Plugin Application Programming Interface(NPAPI) is adeprecatedapplication programming interface(API) for web browserplugins,initially developed forNetscape Navigator2.0 in 1995 and subsequently adopted by other browsers.
In the NPAPI architecture, a plugin declarescontent types(e.g. "audio/mp3" ) that it can handle. When the browser encounters a content type it cannot handle natively, it loads the appropriate plugin, sets aside space within the browser context for the plugin to render and then streams data to it. The plugin is responsible for rendering the data. The plugin runs in-place within the page, as opposed to older browsers that had to launch an external application to handle unknown content types. NPAPI requires each plugin to implement and expose approximately 15 functions for initializing, creating, deleting and positioning plugin content. NPAPI also supports scripting, printing, full-screen plugins, windowless plugins and content streaming.
NPAPI was frequently used for plugins which required intensive, low-level performance such as video players, includingAdobe Flash PlayerandMicrosoft Silverlight,as well as platforms for web applications such as theJava Runtime Environment.
NPAPI support among major browsers started to wane since 2015 and it was gradually deprecated over the following 7 years. All major web browsers have removed support for 3rd party NPAPI plugins for security and maintenance reasons while superior technology exists.
Scripting support
[edit]Scripting is a feature allowingJavaScriptcode in a web page to interact with the plugin. Various versions of Netscape and thenMozillasupported this feature using different technologies, including LiveConnect, XPConnect, and NPRuntime.
LiveConnect
[edit]LiveConnectis a feature of Web browsers that allowsJavaand JavaScript software to intercommunicate within a Web page. From the Java side it allows an applet to invoke the embedded scripts of a page, or to access the built-in JavaScript environment, much as scripts can. Conversely, from the JavaScript side, it allows a script to invoke applet methods, or to access Java runtime libraries, much as applets can.[1][2]
LiveConnect was used inNetscape 4to implement scriptability of NPAPI plugins.
TheOpen Java Interface-dependent implementation of LiveConnect was removed from the Mozilla source code tree in late June 2009 as part of theMozilla 2cleanup effort.[3]It is no longer needed with the release of a redesignedJava Runtime Environmentfrom Sun Microsystems. However the old implementation was restored for Gecko 1.9.2, as Apple had yet to port the newer JRE over to Mac OS X.[4]
The Java–JavaScript functionality supported by the redesigned Java Runtime Environment is still called "LiveConnect", despite theOpen Java Interface-specific approach having been abandoned.[5]With Netscape 4, NPAPI was extended to allow plugins to be scripted. This extension is called LiveConnect. A plugin could implement aJavaclassand expose aninstance of it.The class could be called from JavaScript and fromJava appletsrunning within the page.
The disadvantage of LiveConnect is, that it is heavily tied to the version of Java embedded within the Netscape browser. This prevented the browser from using other Java runtimes, and added bloat to the browser download size, since it required Java to script plugins. Additionally, LiveConnect is tricky to program: The developer has to define a Java class for the plugin, run it through a specialized Javaheadercompiler,and implement nativemethods.Handlingstrings,exceptions,and other JavaobjectsfromC++is non-obvious. In addition, LiveConnect uses an earlier and now obsoleteapplication programming interface(API) for invoking native C++ calls from Java, called JRI. The JRI technology has long since been supplanted byJNI.
XPConnect
[edit]XPConnect(Cross Platform Connect) is a technology which enables simple interoperation betweenXPCOMand JavaScript.
Object connection
[edit]XPConnect allows JavaScript objects to transparently access and manipulate XPCOM objects. It also enables JavaScript objects to present XPCOM compliantinterfacesto be called by XPCOM objects. A main goal is that objects communicating from either side of an XPCOM style interface should not generally need to know or care about the implementation language of the object on the other side of the interface.
XPConnect's primary reason for existence is to replace handwritten code used in places where native code needs to interact with JavaScript code. An example is theDOMmodule.
Security
[edit]Full privileges are only granted by default to chrome scripts, i.e. scripts that are part of the application or of an extension. For remoteHTML/XHTML/XULdocuments, most XPCOM objects are not accessible by the scripts as they have limited privileges due to security reasons. Even if they are accessible (e.g. theXMLHttpRequestobject), the usual security restrictions can also be found (e.g. cannot openURLsof otherdomains).
Mozilla was already using XPCOM to define theinterfacesto many objects implemented in C++. Each interface was defined by anIDLfile, and run through an IDL compiler that produced header files and a language-neutral type library that was a binary representation of the interface. This binary described the interface, the methods, the parameters, the data structures andenumerations.
XPConnect uses the type library information to marshal calls between different thread contexts and between JavaScript and natively compiled C++. XPConnect is used extensively throughout Mozilla. Starting with Netscape 6.1 and Mozilla 0.9.2, NPAPI was extended, so that a plugin could return a scriptable interface to itself and XPConnect would marshal calls to it from JavaScript and the C++ implementation.
XPConnect has no Java dependency. However, the technology is based on XPCOM. Thus the plugin developer must be familiar withreference counting,interfaces and IDL to implement scripting. The dependency on XPCOM led to certain dynamic linking issues (e.g. thefragile base classproblem) which had to be solved before the plugin would work correctly with different browsers. XPCOM has since been changed to supply a statically linked version to address such issues. This approach also requires an.xpt file to be installed next to thedynamic-link library(DLL); otherwise the plugin appears to work, but the scripting does not, causing confusion.
NPRuntime
[edit]At the end of 2004, all major browser companies using NPAPI agreed on NPRuntime[6]as an extension to the original NPAPI to supply scripting, via an API that is similar in style to the old C-style NPAPI and is independent of other browser technologies like Java or XPCOM. It is only supported by Firefox ESR (Extended Support Release) andSafari.
Support
[edit]Because of the age of the API, security issues, and adoption of alternative technologies such asHTML5,many software vendors began to phase out NPAPI support in 2013.[7][8]
Internet Explorer
[edit]Internet Explorerversions 3 through 5.5 SP2 supported NPAPI, allowing plugins that functioned in Netscape Navigator to function in Internet Explorer. Support came via a smallActiveXcontrol (named "plugin.ocx
") that acted as ashimbetween ActiveX and the NPAPI plugin. Microsoft dropped support in version 5.5 SP2 onwards for security reasons.[9][10][11][12]
Google Chrome
[edit]Google Chromepermanently dropped all NPAPI support from all platforms in September 2015.[13]In September 2013, Google announced that it would phase out NPAPI support in its Google Chrome browser during 2014, stating that "[its] 90s-era architecture has become a leading cause of hangs, crashes, security incidents, and code complexity".[14][15]In May 2014, NPAPI support was removed from theLinuxversion of Chrome 35 and later.[16]In April 2015, Chrome forWindowsandOS X(versions 42 and later) disabled NPAPI support by default. However, until September 2015 (version 45), users could re-enable NPAPI.[citation needed]
Opera
[edit]Operadropped support with version 37 in May 2016.[citation needed]
Firefox
[edit]MozillaFirefoxrelease 52.0 in March 2017 removed all support for NPAPI except for Flash.[17][18][19]Meanwhile, the ESR channel retained general support for this feature with version 52 ESR being the last NPAPI resort. Firefox 69.0 disabled the Flash NPAPI by default.[20][21]In Firefox 85.0, released in January 2021, NPAPI support was completely removed.[22][23]In the ESR channel, support for Flash NPAPI ended with version 78.15.0, released in October 2021.[24][25]
Safari
[edit]Safarihas dropped support for all NPAPI plugins except for Flash with version 12 released in September 2018.[26]Flash support has been removed from Safari 14, released in September 2020.[27]
SeaMonkey
[edit]SeaMonkey[28]stopped supporting NPAPI plugins from version 2.53.1, with the exception of Flash. NPAPI support was completely removed in SeaMonkey 2.53.7, released in March 2021.[29]
Support
[edit]The following list ofweb browserssupport all NPAPI plugins:
- 360 Secure Browser(Chinese:360 an toàn trình duyệt) or 360 Extreme Explorer (Chinese:360 cực nhanh trình duyệt)[30]
- Basilisk[31]
- K-Meleon[32](Goannaengine)[33]
- Pale Moon[34](Pale Moon futureroadmap)[35]
- Uzbl[36]
Similar technologies
[edit]ActiveX
[edit]Internet Explorer andbrowsers based on Internet Exploreruse ActiveX controls, ActiveX documents and ActiveX scripting to offer in-page extensibility on par with NPAPI. Although commonly associated with Internet Explorer, ActiveX is integration technology that allows any computer program to integrate parts of other computer programs that support such integration.[37]Internet Explorer, however, is discontinued and its replacement, Microsoft Edge, does not support ActiveX.
PPAPI
[edit]On 12 August 2009 a page on Google Code[38]introduced a new project called Pepper, with the associated Pepper Plugin API (PPAPI);[39]PPAPI is a derivative of NPAPI aimed to make plugins more portable and more secure.[40]This extension is designed specifically to ease the implementation of out-of-processplugin execution.
PPAPI was initially only supported by Google Chrome andChromium.Later, other Chromium-based browsers such asOperaandVivaldiadded PPAPI plugin support.
In February 2012Adobe Systemsannounced that future Linux versions of Adobe Flash Player would be provided only via PPAPI. The previous release, Flash Player 11.2, with NPAPI support, would receive security updates for five years.[41]In August 2016 Adobe announced that, contrary to their previous statement, it would again support the NPAPI Flash Player on Linux and keep releasing new versions of it.[42]
In August 2020, Google announced that support for PPAPI would be removed from Google Chrome and Chromium in June 2022.[43]
See also
[edit]References
[edit]- ^Flanagan, David. (2006).JavaScript: the Definitive Guide.O'Reilly, Sebastopol, California.
- ^For technical details, see the MozillaDeveloper Documentation on LiveConnect.
- ^"442399 – remove LiveConnect from the tree".mozilla.org.
- ^"517355 – Restore OJI, Liveconnect and the JEP on the 1.9.2 branch on OS X".mozilla.org.
- ^"Release Notes for the Next-Generation Java™ Plug-In Technology (introduced in Java SE 6 update 10)".sun.
- ^"Scripting plugins".Mozilla Developer Network.
- ^"Change in support for Acrobat and Reader plug-ins in modern web browsers".Adobe.8 February 2016.
- ^"Oracle deprecates the Java browser plugin, prepares for its demise".Ars Technica.28 January 2016.Retrieved15 April2016.
- ^"Netscape-Style Plug-ins Do Not Work After Upgrading Internet Explorer".Support(3.3 ed.).Microsoft.27 July 2007.
- ^Giannandrea, J. (4 September 2001)."Microsoft breaks Web Plugins in Windows XP".meer.net.Archived fromthe originalon 16 October 2007.
- ^"Description of Internet Explorer Support for Netscape-Style Plug-ins".Support(3.4 ed.).Microsoft.31 January 2007.
- ^"Microsoft Security Bulletin MS03-015 – Critical".Security TechCenter.Microsoft.23 April 2003.
- ^"The final countdown for NPAPI".Chromium Blog.
- ^Google will start blocking most Netscape Plug-In API plug-ins in January 2014, will whitelist Silverlight, Unity & others".TechCrunch.23 September 2013.
- ^"Google looks to drop Netscape Plugin API support in Chrome, starting with blocking most plugins in January 2014".The Next Web.23 September 2013.
- ^"Update on NPAPI deprecation".Chromium Blog.27 May 2014.
- ^"Firefox 52.0, See All New Features, Updates and Fixes".Mozilla.
- ^"Firefox dropping NPAPI plugins by the end of 2016—except for Flash".Firefox Site Compatibility.4 October 2016. Archived fromthe originalon 15 March 2017.Retrieved25 January2017.
- ^"Why do Java, Silverlight, Adobe Acrobat and other plugins no longer work?".Mozilla support.Archived fromthe originalon 2017-03-07.Retrieved2017-03-06.
- ^"1519434 - Disable Flash support by default in Firefox 69".bugzilla.mozilla.org.Retrieved2019-01-14.
- ^"Plugin Roadmap for Firefox - Plugins".MDN Web Docs.Retrieved2021-07-12.
- ^Jim Mathies (13 November 2020)."Removal of NPAPI plugin support in Firefox 85".mozilla.dev.platform (via Google Groups).Retrieved10 February2021.
- ^"Plugin Roadmap for Firefox".MDN.19 January 2021. Archived fromthe originalon 21 January 2021.Retrieved10 February2021.
- ^"Firefox for Enterprise 91 - Release notes | Firefox for Enterprise Help".support.mozilla.org.Retrieved2022-02-13.
- ^"Firefox ESR 78.15.0, See All New Features, Updates and Fixes".Mozilla.Retrieved2022-01-03.
- ^Clover, Juli (September 17, 2018)."Apple Releases Safari 12 for macOS Sierra and macOS High Sierra".MacRumors.
- ^"Safari 14 Release Notes".Apple Developer Documentation.
- ^"Why do Oracle Java, Microsoft Silverlight, Adobe Acrobat Reader and other plugins no longer work?"NPAPI plugins
- ^"SeaMonkey 2.53.7 Release Notes".Retrieved14 March2021.
- ^"NPAPI là trọng hình vũ khí, đương khác phương pháp vô pháp tới mục đích của ngươi khi, mới kiến nghị sử dụng.".NPAPI cắm kiện.
- ^"Support for all NPAPI plugins (Unity, Silverlight, Flash, Java, authentication plugins, etc.)".Basilisk features.
- ^"Most third-party plug-ins designed for Mozilla/Netscape will also work with K-Meleon".Third party plugins.
- ^"Load all NPAPI-Plugins, Java, Silverlight, etc."K-Meleon Hybrid (Goanna over Pro).
- ^"Full and ongoing support for NPAPI plugins (Java, Silverlight, etc.)".Pale Moon: Technical Details
- ^"Pale Moon supports NPAPI plug-ins. Unlike Firefox, we will not be deprecating or removing support for these kinds of plug-ins".Pale Moon future roadmap.
- ^"We use the NPAPI plugin architecture (just like Mozilla) so just install the plugins normally, and things should work".Uzbl FAQ.
- ^"Description of ActiveX Technologies".Support.Microsoft.19 January 2007.
- ^"ppapi".Google Code.Archived fromthe originalon 2010-07-02.
- ^"Getting Started: Background and Basics – The Chromium Projects".chromium.org.
- ^"Concepts - ppapi - Important concepts for working with PPAPI. - Pepper Plugin API – Google Project Hosting".google.
- ^"Adobe and Google Partnering for Flash Player on Linux".adobe.Archived fromthe originalon 2012-02-23.Retrieved2012-03-07.
- ^Campbell, Chris (31 August 2016)."Beta News – Flash Player NPAPI for Linux".Adobe AIR and Adobe Flash Player Team Blog.Adobe Systems.Retrieved8 September2016.
- ^Anthony Laforge (August 10, 2020)."Changes to the Chrome App Support Timeline".Chromium Blog.
External links
[edit]- Plugin development documentationArchived2012-08-03 at theWayback Machineon Mozilla Developer Center, including the NPAPI API
- An ActiveX control that hosts plugins– a replacement for plugin.ocx that was removed from Internet Explorer.
- Book on Programming Netscape Plug-Ins by Zan Oliphant
- Nixysa: A glue code generation framework for NPAPI plugins. Apache 2.0 license.
- NPAPI TutorialBuilding a Firefox Plugin(Part two,Part three,Part four)
- Opera 15+ extensions documentation