Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8027862

Regression: Security warning is shown instead of Application Blocked dialog if permissions attribute is missing

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P2
    • Resolution: Duplicate
    • Affects Version/s: 7u51, 8
    • Fix Version/s: None
    • Component/s: deploy
    • Labels:

      Description

      Build Tested: 8-b255_2013-11-05-0301_664
      In jdk8 we are going to block all applications/applets at levels if permissions attribute is missing from the signed jar. We used to show application blocked dialog against all such scenarios. But now we started to show the security warning dialog (with yellow warning) instead of application blocked dialog. In case user selects to run then we end up throwing security exception
      Steps to reproduce
      1) Make sure that exception list if not defined and SLIDER level is set to HIGH(default level) or VERY HIGH
      2) Import following certificate into trusted signer CA store
      http://sqeweb.us.oracle.com/deployment2/jitu/plug-bug/DRS/new626.p12
      3) Try to load following applet
      http://sqeweb.us.oracle.com/deployment2/jitu/plug-bug/ocsp/new/AppletFullJavaVersion.html
      If instead of application blocked dialog , security warning dialog is seen then bug is reproduced

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                herrick Andy Herrick
                Reporter:
                jijising Jitender Singh (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: