Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8027862

Regression: Security warning is shown instead of Application Blocked dialog if permissions attribute is missing

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P2
    • Resolution: Duplicate
    • Affects Version/s: 7u51, 8
    • Fix Version/s: None
    • Component/s: deploy
    • Labels:

      Description

      Build Tested: 8-b255_2013-11-05-0301_664
      In jdk8 we are going to block all applications/applets at levels if permissions attribute is missing from the signed jar. We used to show application blocked dialog against all such scenarios. But now we started to show the security warning dialog (with yellow warning) instead of application blocked dialog. In case user selects to run then we end up throwing security exception
      Steps to reproduce
      1) Make sure that exception list if not defined and SLIDER level is set to HIGH(default level) or VERY HIGH
      2) Import following certificate into trusted signer CA store
      http://sqeweb.us.oracle.com/deployment2/jitu/plug-bug/DRS/new626.p12
      3) Try to load following applet
      http://sqeweb.us.oracle.com/deployment2/jitu/plug-bug/ocsp/new/AppletFullJavaVersion.html
      If instead of application blocked dialog , security warning dialog is seen then bug is reproduced

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              herrick Andy Herrick
              Reporter:
              jijising Jitender Singh (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: