sIFR (Scalable Inman Flash Replacement) is an interesting technology that allows web sites to specify exactly what font size they would like for their headings. The browser wouldn't do a good job at it so sIFR replaces regular text by Flash that shows exactly what web designers want. Which is actually a rare example of using Flash in a good way - these heading are regular static text, it still can be selected and copied, and if you happen not to have Flash installed (or you block it) - regular text will still be displayed instead.
However, Adblock Plus with "Show tabs on Flash and Java" enabled introduces a problem - every such heading gets a tab saying "Adblock" which obscures the text. You can see it on ABCNews for example. Consequently, the sIFR community was trying to use CSS to hide these tabs while I was trying to prevent them from doing that (the same CSS could be used by advertisers and then it makes harder to block the ads). Current 0.7.2.3 version breaks sIFR's "solution" to the problem once again and hopefully will prevent websites from using CSS to hide object tabs altogether.
I discussed the issue with Mark Wubben, especially with regard to the fact that the user must be in control here. Object tabs are not displayed if the object is whitelisted, so a site using sIFR actually needs the user to whitelist the sIFR objects. I found a scheme that makes it easier while not making Adblock Plus discoverable at the same time:
* The website creates a custom event that it sends out at the object in question
* Adblock Plus detects the event and interprets it as a request to whitelist the object. If Adblock Plus isn't installed the event will simply be ignored. If the object is already whitelisted or blocked - the event will be ignored as well.
* It then displays an info bar, something like: "The web page claims that some objects here contain useful content and the tab makes it harder to read. Add exception rule for these objects?" You can then add the necessary exception rules with two clicks (click info bar once and then confirm).
What do you think about this? Would it work, is it safe from abuse? I think that I should at least add a "same origin check" - only objects downloaded from the same domain as the site will be accepted.