I'm pretty sure that version reporting works differently after 11.5, which is why the spoofing fails, for the component to check against, simply doesn't exist.
TenFourFox 17 supports click-to-play, but you need to enable plugins. TenFourFox versions later than 17.x do not support plugins at all, which makes them rather useless in my eyes. The forced withdrawal from plugin support is a terrible move; done only for people who don't follow any safe browsing practices.
Does anyone have a list of what Flash exploits are genuine vulnerabilities on OSX at present? I thought that most of the evil, malware, runtime code, was dependant on Windows libraries.
If mainstream sites switched to a dual version, with HTML5, it would be nice; but even then, we wouldn't have the correct decryption algorithms to use them, and <10.4 users would be even more stuck.
What the world needs, is a (corporate-supported), open-source alternative to Flash.Something that eBay, Google/YouTune, Netflix, et al., could use in place of Flash, that is available to compile on anything. JAVA RTE is a more flexible platform than Flash, as Sun (or is it Oracle now?) allows source access.