Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6973253

Use "user initiated action" requirement to avoid security dialogs in several JNLP APIs

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Won't Fix
    • Icon: P3 P3
    • tbd
    • 7
    • deploy
    • generic
    • generic

      Certain JNLP APIs such as FileOpenService, FileSaveService, and PrintService show a security dialog even though there is a subsequent dialog that requires the user to interact with the application to provide the required information. The security dialog can be eliminated if we require that these services be the result of a user initiated action. In other words the application may only invoke these services in response to a user initiated action, such as a mouse click. The action also must be completed within a certain amount of time. This means that the user knows what application they are interacting with.

      The user initiated action requirement is used in other technologies such as Silverlight, Flash, and web browsers so it is not a new concept.

            Unassigned Unassigned
            mullan Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: