Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8055265

Java applet manifest attribute Caller-Allowable-Codebase ignored

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not an Issue
    • Icon: P3 P3
    • None
    • 7u67
    • deploy

      FULL PRODUCT VERSION :
      Java Plug-in 10.67.2.01
      Using JRE version 1.7.0_67-b01 Java HotSpot(TM) Client VM

      Java Plug-in 11.11.2.12
      Using JRE version 1.8.0_11-b12 Java HotSpot(TM) Client VM

      ADDITIONAL OS VERSION INFORMATION :
      Microsoft Windows [Version 6.1.7601]

      A DESCRIPTION OF THE PROBLEM :
      Our applet uses LiveConnect calls and is configured with the following manifest attributes:

      Manifest-Version: 1.0
      Implementation-Vendor: Schneider Electric Buildings AB
      Implementation-version: 1.5.0.49829
      Application-Name: Building Operation WebStation
      Permissions: all-permissions
      Created-By: 1.6.0_32 (Sun Microsystems Inc.)
      Caller-Allowable-Codebase: *
      Application-Library-Allowable-Codebase: *
      Codebase: *

      The "Allow access to this application" security pop-up is displayed each time we navigate to the applet. We get the same result with the latest java 8.

      http://stackoverflow.com/questions/25324913/java-applet-liveconnect-security-warning-popup

      REGRESSION. Last worked in version 7u40

      ADDITIONAL REGRESSION INFORMATION:
      Java Plug-in 10.67.2.01
      Using JRE version 1.7.0_67-b01 Java HotSpot(TM) Client VM

      Java Plug-in 11.11.2.12
      Using JRE version 1.8.0_11-b12 Java HotSpot(TM) Client VM

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      create a method inside the applet class
      let Javascript call the method in the applet class
      sign the applet
      navigate to the page which loads the applet and calls the test method from javascript

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      that the Caller-Allowable-Codebase: * attribute ensures that liveconnect calls can be made without pop-ups
      ACTUAL -
      pop-up warning always shown

      REPRODUCIBILITY :
      This bug can be reproduced always.

            dmarkov Dmitry Markov
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: