Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4087775

appletresource: can be used to bypass checkconnect()

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P1
    • Resolution: Fixed
    • Affects Version/s: 1.1
    • Fix Version/s: 1.1.5
    • Component/s: core-libs
    • Labels:
      None
    • Subcomponent:
    • Resolved In Build:
      1.1.5
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Not verified

      Description

      Extract the attached files. You will need to arrange the http: source location so that the first applet (in one.html) is loaded via file:, whle the second is loaded via http:. Then run as "gnumake run".

      The second applet (Two.java) will succeed in getting a URL into a resource that was loaded via the ARCHIVE attribute of the first applet. This URL can even be used to read its contents. THis is not good.

        Attachments

          Activity

            People

            Assignee:
            epelegrisunw Eduardo Pelegrillopart (Inactive)
            Reporter:
            epelegrisunw Eduardo Pelegrillopart (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: