Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8031186

Webkit based browser is able to remove user defined global object via Java liveconnect.

XMLWordPrintable

      What the test does:
      1 applet is trying to remove user defined global javascript object via JSObject.getWindow(this).removeMember().
      2. if the object could not be removed, then test PASS. Otherwise, FAIL.

      Steps to reproduce:
      1. Install latest 8 promotion build, say b112 on windows-x86.
      2. switch java console on and set security level to Medium (since the applet is unsigned)
      3. In Chrome, access page http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/liveconnect/html/testJava2JSRemoveMemberWholeJSObject_Negative.html
      4. Accept unsigned security warning dialog.
      5. Accept two js pop-up showing user object and user object's property "text".
      6. If there's another pop-up showing "undefined", then the issue is reproduced (the global object has been removed).

      Note:
      1. The issue exists on webkit based browser (Chrome/Safari) only.
      2. This is an issue exists for long, so this is not a regression.
      3. Here is a pure js/html link showing that we could not remove user defined global object in IE/CHrome: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/liveconnect/html/test_removal.html

      java source code:
      http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/liveconnect/src/Java2JSRemoveMemberWholeJSObjectApplet.java

            vdrozdov Victor Drozdov (Inactive)
            stephenh Stephen Hu (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: