Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8027862

Regression: Security warning is shown instead of Application Blocked dialog if permissions attribute is missing

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: P2 P2
    • None
    • 7u51, 8
    • deploy

      Build Tested: 8-b255_2013-11-05-0301_664
      In jdk8 we are going to block all applications/applets at levels if permissions attribute is missing from the signed jar. We used to show application blocked dialog against all such scenarios. But now we started to show the security warning dialog (with yellow warning) instead of application blocked dialog. In case user selects to run then we end up throwing security exception
      Steps to reproduce
      1) Make sure that exception list if not defined and SLIDER level is set to HIGH(default level) or VERY HIGH
      2) Import following certificate into trusted signer CA store
      http://sqeweb.us.oracle.com/deployment2/jitu/plug-bug/DRS/new626.p12
      3) Try to load following applet
      http://sqeweb.us.oracle.com/deployment2/jitu/plug-bug/ocsp/new/AppletFullJavaVersion.html
      If instead of application blocked dialog , security warning dialog is seen then bug is reproduced

            herrick Andy Herrick (Inactive)
            jijising Jitender Singh (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: