Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8313579

[macos] Info.plist files should not define NSMicrophoneUsageDescription unless requested

    XMLWordPrintable

Details

    • Bug
    • Resolution: Won't Fix
    • P3
    • None
    • 18
    • tools
    • 18

    Description

      jpackage unconditionally defines the NSMicrophoneUsageDescription property in the default Info.plist file. It should not do this unless the developer specifically requests it, for these reasons:

      1. Someone examining the Info.plist file of an application may be suspicious of the application if the application is not expected to use the microphone.
      2. When this property is defined, any code in the application has the ability to request microphone access from the user. This is a potential security weakness because the request could be made by a 3rd party library without the knowledge of the application developer.
      3. Apple encourages application developers to explain the need for microphone access clearly. A generic explanation does not satisfy this criteria.

      Also: I'm not sure how to report this, but I found a total of 36 Info.plist files in the JDK repo that define this property. They are probably all incorrect in the sense that the associated code does not actually require microphone access.

      Attachments

        Issue Links

          Activity

            People

              almatvee Alexander Matveev
              alans Alan Snyder
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: