Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8094925

[Service,WebView] Security exception in Service.cancel and URLLoaderThreadFactory when running sandboxed applet

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P2
    • Resolution: Fixed
    • Affects Version/s: 8u25
    • Fix Version/s: 8u40
    • Component/s: javafx
    • Environment:

      Java-Plug-in 11.25.2.18
      JRE-Version verwenden 1.8.0_25-b18 Java HotSpot(TM) Client VM
      Google Chrome
      In Sandbox-Applet

    • Subcomponent:
      web

      Description

      The following exception occurs when trying to load an URL in WebView in Java 8u25 in a Sandboxed Applet.

      The URL is this (but i do not think it matters which URL it is):
      http://chat.knuddels.de:2720/apps/api/loader.html?client=Applet

      java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "modifyThreadGroup")
      at java.security.AccessControlContext.checkPermission(Unknown Source)
      at java.security.AccessController.checkPermission(Unknown Source)
      at java.lang.SecurityManager.checkPermission(Unknown Source)
      at sun.plugin2.applet.SecurityManagerHelper.checkAccessHelper(Unknown Source)
      at sun.plugin2.applet.AWTAppletSecurityManager.checkAccess(Unknown Source)
      at java.lang.ThreadGroup.checkAccess(Unknown Source)
      at java.lang.Thread.init(Unknown Source)
      at java.lang.Thread.init(Unknown Source)
      at java.lang.Thread.<init>(Unknown Source)
      at com.sun.webkit.network.NetworkContext$URLLoaderThreadFactory.newThread(Unknown Source)
      at java.util.concurrent.ThreadPoolExecutor$Worker.<init>(Unknown Source)
      at java.util.concurrent.ThreadPoolExecutor.addWorker(Unknown Source)
      at java.util.concurrent.ThreadPoolExecutor.execute(Unknown Source)
      at java.util.concurrent.AbstractExecutorService.submit(Unknown Source)
      at com.sun.webkit.network.NetworkContext.fwkLoad(Unknown Source)
      at com.sun.webkit.network.URLLoader.twkDidReceiveData(Native Method)
      at com.sun.webkit.network.URLLoader.notifyDidReceiveData(Unknown Source)
      at com.sun.webkit.network.URLLoader.lambda$didReceiveData$91(Unknown Source)
      at com.sun.webkit.network.URLLoader$$Lambda$157/157794.run(Unknown Source)
      at com.sun.javafx.application.PlatformImpl.lambda$null$164(Unknown Source)
      at com.sun.javafx.application.PlatformImpl$$Lambda$67/15013748.run(Unknown Source)
      at java.security.AccessController.doPrivileged(Native Method)
      at com.sun.javafx.application.PlatformImpl.lambda$runLater$165(Unknown Source)
      at com.sun.javafx.application.PlatformImpl$$Lambda$66/31250559.run(Unknown Source)
      at com.sun.glass.ui.InvokeLaterDispatcher$Future.run(Unknown Source)
      at com.sun.glass.ui.win.WinApplication._runLoop(Native Method)
      at com.sun.glass.ui.win.WinApplication.lambda$null$141(Unknown Source)
      at com.sun.glass.ui.win.WinApplication$$Lambda$54/27601048.run(Unknown Source)
      at java.lang.Thread.run(Unknown Source)

      This is a blocker for our next release, as we rely heavily on the WebView technology for our newest project.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                kcr Kevin Rushforth
                Reporter:
                fleitenbejfx Frederic Leitenberger (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Imported: