Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8074391

imperfect jnlp file brings up misleading security dialog 'Application Blocked by Java Security'

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Fix
    • Icon: P3 P3
    • 9
    • 7u76, 8u40
    • deploy
    • x86
    • windows_vista


      jnlp file contains a typo. The <description> tag is imperfect, missing closing '>'.
      As a result, the security dialog 'Application Blocked by Java Security' is presented.
      This is confusing and misleading, as the application implements the manifest attributes
      and is signed with an official certificate.

      Here is the imperfect jnlp file:

      # more simple-defective.jnlp
      <?xml version="1.0" encoding="utf-8"?>
      <jnlp codebase = "http://xxx:8880/simpleNoGUI-defective" href="simple-defective.jnlp" >
        <information>
              <title>Java Web Start - Simple</title>
              <vendor>Simple Demo w/o GUI </vendor>
              <descriptionWebStart Simple App</description>
        </information>

        <security>
              <all-permissions/>
        </security>

        <resources>
              <j2se version="1.8+" />
        </resources>
        <resources>
              <jar href="simple.jar" />
        </resources>

        <application-desc main-class="webstart.Simple" >
        </application-desc>

      </jnlp>

        1. 20150304-8u40-security-dialog.png
          130 kB
          Thomas Lenz
        2. 20150304-8u40-works.png
          120 kB
          Thomas Lenz
        3. 20150306-8u40-Blocked-Dailog-app2.png
          124 kB
          Thomas Lenz
        4. 20150306-8u40-Blocked-Dialog-app1.png
          126 kB
          Thomas Lenz
        5. 20150306-8u40-show-signing-certificate.png
          145 kB
          Thomas Lenz
        6. 20150306-8u40-simple-starts-fine.png
          120 kB
          Thomas Lenz
        7. 20150309-8u40-launch-defective.png
          63 kB
          Thomas Lenz
        8. launch.jnlp
          0.6 kB
          Kirill Kirichenko
        9. launch.jnlp
          0.6 kB
          Kirill Kirichenko
        10. launch1.jnlp
          0.6 kB
          Kirill Kirichenko
        11. launch1.jnlp
          0.6 kB
          Kirill Kirichenko

            stayer Kirill Kirichenko (Inactive)
            thlenz Thomas Lenz (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: