Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8028700

Signed Traditional sandbox applet with sandbox attribute in manifest file is blocked at High level

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P3
    • Resolution: Not an Issue
    • Affects Version/s: 8
    • Fix Version/s: None
    • Component/s: deploy
    • Environment:

      win7 x86, IE9, jre8 #794

      Description

      Traditional sandbox applet with sandbox attribute in manifest file and signed with trust valid cert should not be blocked, but now it is blocked as "untrusted application" after accepting the signed security warning dialog.

      Steps to reproduce:
      0) Install jre8 #794
      1) Import cert into signer CA from
      http://sqeweb.us.oracle.com/deployment2/sheldon/webCases/appletattack2/tmpcert/self.valid.cert
      2) Launch the applet from
      http://sqeweb.us.oracle.com/deployment2/sheldon/webCases/appletattack2/html/testAppletAttackJRELibAppletSingle.html
      3) Accept the signed security warning dialog.
      4) If applet is blocked with information:Your security settings have blocked an untrusted applicaiton from running, bug is reproducible.

        Attachments

          Activity

            People

            • Assignee:
              herrick Andy Herrick
              Reporter:
              yanqchen Sheldon Chen (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: