United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-6907171 PhotoFlockr JavaFX app shows security dialog for net access even though crossdomain allows access
JDK-6907171 : PhotoFlockr JavaFX app shows security dialog for net access even though crossdomain allows access

Details
Type:
Bug
Submit Date:
2009-12-03
Status:
Resolved
Updated Date:
2010-09-16
Project Name:
JDK
Resolved Date:
2009-12-23
Component:
deploy
OS:
generic
Sub-Component:
deployment_toolkit
CPU:
generic
Priority:
P3
Resolution:
Fixed
Affected Versions:
6u17
Fixed Versions:
6u19 (b01)

Related Reports
Backport:

Sub Tasks

Description
An unsigned PhotoFlockr JavaFX app shows several security dialog for accessing content from farm3.static.flickr.com even though
that site has a crossdomain file allowing any domain access:

http://farm3.static.flickr.com/crossdomain.xml 

This should work without a security dialog since we added support for cross domain in 6u10.

The PhotoFlockr sample on javafx.com is currently signed. We are in the process of unsigning some of them in order to give a better user experience. 

See comments for more info on how to reproduce this.

                                    

Comments
EVALUATION

It looks like the unsigned applet is working (images seems to be displayed correctly), but for some reason, we are still poping up the security dialog for network connection. (applet seems working still even if you cancel the dialog) Need to find out what's causing the pop up.
                                     
2009-12-04
EVALUATION

This bug is caused by a race condition in CrossDomainXML class, when url is null, sometimes the quickFullCheck and changed variable didn't return correct value due to outside the synchronzied block, this looks like related to bug fix 6794977, which didn't cover this case.
                                     
2009-12-18



Hardware and Software, Engineered to Work Together