JDK-8031998 : 7u51 still shows Applet Security Warnings talks about "blocked in future version"
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 7u45,7u51
  • Priority: P3
  • Status: Closed
  • Resolution: Duplicate
  • OS: windows_7
  • Submitted: 2014-01-14
  • Updated: 2014-02-18
  • Resolved: 2014-02-18
Related Reports
Duplicate :  
JDK-8027821 - For signed jars without manifest "Permissions", there is still security warning dialog before Application Error (Or blocked) Dialog.
Description
FULL PRODUCT VERSION :
java version "1.7.0_51"
Java(TM) SE Runtime Environment (build 1.7.0_51-b13)
Java HotSpot(TM) Client VM (build 24.51-b03, mixed mode, sharing)
NB: the bug entry form does not allow to specify 7U51!
7U60EA has the same problem.

ADDITIONAL OS VERSION INFORMATION :
Win7 (x64) DE
 
EXTRA RELEVANT SYSTEM CONFIGURATION :
Firefox 26


A DESCRIPTION OF THE PROBLEM :
When trying to start a Applet with full permissions which does not have the permissions attribute in the main JAR, the start splash screen still shows the warning that future versions of Java will not start it. However the future is now, and 7U51 will throw an error in the next step.



REGRESSION.  Last worked in version 7u45

ADDITIONAL REGRESSION INFORMATION:
In 7U45 the message was correct, in 7U51 it is no longer correct to show it.

STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Navigate to a Applet which is incorrectly built and requests full permissions.

EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
The Applet Detail screen should show a "might not work in futrue versions" but "does not work in this version"
ACTUAL -
A warning and a error when clicking on the execute button.

ERROR MESSAGES/STACK TRACES THAT OCCUR :
(unexpected)
Diese Anwendung wird in einem zuk??nftigen Java-Sicherheitsupdate blockiert, weil das Manifest der JAR-Datei nicht das Attribut "Berechtigungen" enth??lt. Weitere Informationen erhalten Sie vom Anbieter. Weitere Informationen

(expected)
java.lang.SecurityException: Missing required Permissions manifest attribute in main jar: http://webplayer.unity3d.com/download_webplayer-3.x/3.0/jws/UnityWebPlayer.jar
at com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unknown Source)
at com.sun.deploy.security.DeployManifestChecker.verifyMainJar(Unknown Source)
at sun.plugin2.applet.Plugin2Manager.isAppletTrusted(Unknown Source)
at sun.plugin2.applet.Plugin2Manager.initAppletAdapter(Unknown Source)
at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)


REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
No workaround needed, only the displayed warning is wrong.
Comments
duplicate of https://bugs.openjdk.java.net/browse/JDK-8027821
18-02-2014
It is not a regression since in 7u51 Permission attribute in manifest file is a mandatory. At the same time there is an inconsistency between the text in warning dialog and actual behavior. Logically, Application Blocked dialog need to be shown instead, or at least the text need to be corrected and probably "Run" button disabled.
16-01-2014
Attaching screenshot showing the 'will be blocked in the future' message, when running 7u51
16-01-2014
I'm re-opening. Would like clarification from Dev team as to whether the submitter has a point around this dialog warning panel popping up in 7u51.
16-01-2014
Application needs to be updated with "Missing required Permissions manifest attribute"
15-01-2014