JDK-6895411 : Regression: Applets are not honoring the remote policy URL
- Type: Bug
- Component: deploy
- Sub-Component: plugin
- Affected Version: 6u18
- Priority: P3
- Status: Closed
- Resolution: Fixed
- OS: generic
- CPU: generic
- Submitted: 2009-10-26
- Updated: 2010-09-08
- Resolved: 2010-06-19
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 6 |
|---|
6u21 b02Fixed  |
Related Reports
|
Relates :
|
Description
Applets are ignoring the permissions specified inside the remote polciy URL.
Steps to reproduce:
1) Install JRE 6u18-b04
2) Set following permissions inside the .java.policy file inside the <user_home>
grant {
permission java.lang.RuntimePermission "usePolicy";
};
3) Set "policy.url.2" inside <jre_home>/lib/security/java.security as follows
policy.url.2=http://nicole1.sfbay.sun.com:8080/plugin_tests/usePolicy/sqe.policy
Permissions inside the remote policy file are :
grant {
permission java.security.AllPermission;
};
4) Try loading the following signed applet:
http://sqeweb.sfbay.sun.com/deployment2/jitu/plug-bug/security/file/exec/AppletFullJavaVersion.html
It should get loaded without any security pop-up. If security pop-up is there then bug is reproduced
5) Try loading the following unsigned applet. It should not throw any security exception
http://sqeweb.sfbay.sun.com/deployment2/jitu/plug-bug/security/file/exec/AppletFullJavaVerUnsigned.html
If security exception is thrown then bug is reproduced
Comments
|