Bad script might crash JVM

XMLWordPrintable

    • Type: Bug
    • Resolution: Cannot Reproduce
    • Priority: P3
    • 8
    • Affects Version/s: 7u21
    • Component/s: javafx
    • Environment:

      window 7

    • web

      Note, the webview is working under our swing application

      In our application, we have a feature to allow user to upload some html content to our system. We find that
      some misused script will lead the JVM crashed.

      Because we cannot guarantee that user's script is complete safe, so this issue is quite fatal to us.

      a proved script is like below
      The cause we beleive is DOMSubtreeModified event here.


      <script>
      $('iframe#myIframe').attr('src', 'inner.html');
      $('iframe#myIframe').load(function(){
      $('html', $('#myIframe').contents()).bind("DOMSubtreeModified", function() {
      $(this).attr('disabled','true');
      });
      });




      //retrieveData();
      </script>

            Assignee:
            Martin Sládeček
            Reporter:
            Max Zhang (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported: