-
Bug
-
Resolution: Fixed
-
P2
-
8u60, 9
-
all
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8079691 | 9 | Andy Herrick | P2 | Resolved | Fixed | b68 |
JDK-8098607 | emb-9 | Andy Herrick | P2 | Resolved | Fixed | team |
JDK-8086383 | 8u65 | Andy Herrick | P2 | Resolved | Fixed | b01 |
JDK-8137435 | emb-8u65 | Unassigned | P2 | Resolved | Fixed | b01 |
JDK-8081086 | emb-8u60 | Andy Herrick | P2 | Resolved | Fixed | team |
The fix to JDK-8078534 in CodeRef.getChecksum() wiped out the fix for this (JDK-8076220) by changing:
if ((checksum == null || checksumAlg == null ||
!checksumAlg.equals(algorithm)) && (!isCodebase)) {
to:
if (checksum == null) {
// only valid algorithm is now SHA-256
if (algorithm != null && !algorithm.equalsIgnoreCase("SHA-256")) {
throw new IOException("Invalid checksum algorithm: " +
algorithm);
}
instead it should have changed it to:
if (checksum == null && !isCodebase) {
...
The check for !isCodebase was inadvertently removed as part ofJDK-8078534
As a result - having a checksum base DRS rule installed will again cause the "directory" to be downloaded when running an html applet using loose classes from the codebase
if ((checksum == null || checksumAlg == null ||
!checksumAlg.equals(algorithm)) && (!isCodebase)) {
to:
if (checksum == null) {
// only valid algorithm is now SHA-256
if (algorithm != null && !algorithm.equalsIgnoreCase("SHA-256")) {
throw new IOException("Invalid checksum algorithm: " +
algorithm);
}
instead it should have changed it to:
if (checksum == null && !isCodebase) {
...
The check for !isCodebase was inadvertently removed as part of
As a result - having a checksum base DRS rule installed will again cause the "directory" to be downloaded when running an html applet using loose classes from the codebase
- backported by
-
JDK-8079691 fix to JDK-8078534 removed part of fix to JDK-8076220
- Resolved
-
JDK-8081086 fix to JDK-8078534 removed part of fix to JDK-8076220
- Resolved
-
JDK-8086383 fix to JDK-8078534 removed part of fix to JDK-8076220
- Resolved
-
JDK-8098607 fix to JDK-8078534 removed part of fix to JDK-8076220
- Resolved
-
JDK-8137435 fix to JDK-8078534 removed part of fix to JDK-8076220
- Resolved
- relates to
-
JDK-8078534 DRS 1.2: checksum algorithm needs to be restricted to SHA-256
- Closed
(1 relates to)