Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8074391

imperfect jnlp file brings up misleading security dialog 'Application Blocked by Java Security'

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Fix
    • Icon: P3 P3
    • 9
    • 7u76, 8u40
    • deploy
    • x86
    • windows_vista


      jnlp file contains a typo. The <description> tag is imperfect, missing closing '>'.
      As a result, the security dialog 'Application Blocked by Java Security' is presented.
      This is confusing and misleading, as the application implements the manifest attributes
      and is signed with an official certificate.

      Here is the imperfect jnlp file:

      # more simple-defective.jnlp
      <?xml version="1.0" encoding="utf-8"?>
      <jnlp codebase = "http://xxx:8880/simpleNoGUI-defective" href="simple-defective.jnlp" >
        <information>
              <title>Java Web Start - Simple</title>
              <vendor>Simple Demo w/o GUI </vendor>
              <descriptionWebStart Simple App</description>
        </information>

        <security>
              <all-permissions/>
        </security>

        <resources>
              <j2se version="1.8+" />
        </resources>
        <resources>
              <jar href="simple.jar" />
        </resources>

        <application-desc main-class="webstart.Simple" >
        </application-desc>

      </jnlp>

        1. launch1.jnlp
          0.6 kB
        2. launch1.jnlp
          0.6 kB
        3. launch.jnlp
          0.6 kB
        4. launch.jnlp
          0.6 kB
        5. jnlp.jar
          6 kB
        6. jnlp.jar
          6 kB
        7. 20150309-8u40-launch-defective.png
          20150309-8u40-launch-defective.png
          63 kB
        8. 20150306-8u40-simple-starts-fine.png
          20150306-8u40-simple-starts-fine.png
          120 kB
        9. 20150306-8u40-show-signing-certificate.png
          20150306-8u40-show-signing-certificate.png
          145 kB
        10. 20150306-8u40-Blocked-Dialog-app1.png
          20150306-8u40-Blocked-Dialog-app1.png
          126 kB
        11. 20150306-8u40-Blocked-Dailog-app2.png
          20150306-8u40-Blocked-Dailog-app2.png
          124 kB
        12. 20150304-8u40-works.png
          20150304-8u40-works.png
          120 kB
        13. 20150304-8u40-security-dialog.png
          20150304-8u40-security-dialog.png
          130 kB

            stayer Kirill Kirichenko (Inactive)
            thlenz Thomas Lenz (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: