Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4087775

appletresource: can be used to bypass checkconnect()

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P1 P1
    • 1.1.5
    • 1.1
    • core-libs
    • None
    • 1.1.5
    • generic
    • generic
    • Not verified

      Extract the attached files. You will need to arrange the http: source location so that the first applet (in one.html) is loaded via file:, whle the second is loaded via http:. Then run as "gnumake run".

      The second applet (Two.java) will succeed in getting a URL into a resource that was loaded via the ARCHIVE attribute of the first applet. This URL can even be used to read its contents. THis is not good.

            epelegrisunw Eduardo Pelegrillopart (Inactive)
            epelegrisunw Eduardo Pelegrillopart (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: