Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8031186

Webkit based browser is able to remove user defined global object via Java liveconnect.

    Details

      Description

      What the test does:
      1 applet is trying to remove user defined global javascript object via JSObject.getWindow(this).removeMember().
      2. if the object could not be removed, then test PASS. Otherwise, FAIL.

      Steps to reproduce:
      1. Install latest 8 promotion build, say b112 on windows-x86.
      2. switch java console on and set security level to Medium (since the applet is unsigned)
      3. In Chrome, access page http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/liveconnect/html/testJava2JSRemoveMemberWholeJSObject_Negative.html
      4. Accept unsigned security warning dialog.
      5. Accept two js pop-up showing user object and user object's property "text".
      6. If there's another pop-up showing "undefined", then the issue is reproduced (the global object has been removed).

      Note:
      1. The issue exists on webkit based browser (Chrome/Safari) only.
      2. This is an issue exists for long, so this is not a regression.
      3. Here is a pure js/html link showing that we could not remove user defined global object in IE/CHrome: http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/liveconnect/html/test_removal.html

      java source code:
      http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/stephen/deployment_stuff/do.NOT.remove.me/bugs/liveconnect/src/Java2JSRemoveMemberWholeJSObjectApplet.java

        Attachments

          Activity

            People

            • Assignee:
              vdrozdov Victor Drozdov (Inactive)
              Reporter:
              stephenh Stephen Hu (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: