JDK-7105641 : DeployClassLoader failed to findResource due to SecurityException
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 7
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2011-10-27
  • Updated: 2013-09-12
  • Resolved: 2012-05-21
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7 JDK 8
7u4Fixed 8 b18Fixed
Description
JavaFX class is loaded by DeployClassLoader. Without enough elevated permission, when unsigned user code use javax.jnlp.FileOpenService, for example, which triggers a FX dialog trying to load resources within jfxrt.jar, it could fail as File read permission to jfxrt.jar is not granted by the sandbox permission.

The bug was originally reported at http://javafx-jira.kenai.com/browse/RT-15819.

Comments
EVALUATION When user code invoke an FX class which try to load resource, NULL will be returned as the user code doesn't have enough privilege to read the jfxrt.jar. doPrivilege block should be used to load resources managed by DeployClassLoader.
22-11-2011