Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #26378 > unrolled thread

More Applet errors with 7u45

Back to article view | Back to comp.lang.java.programmer

Contents

  More Applet errors with 7u45 Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-10-19 10:59 +0800
    Re: More Applet errors with 7u45 Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-10-19 12:32 +0800
      Re: More Applet errors with 7u45 Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-10-20 11:58 +0800
        Re: More Applet errors with 7u45 "Qu0ll" <Qu0llSixFour@gmail.com> - 2013-10-20 20:21 +1100
          Do not go gentle into that good night Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-10-22 22:09 +0800
            Re: Do not go gentle into that good night "Qu0ll" <Qu0llSixFour@gmail.com> - 2013-10-23 17:12 +1100

#26378 — More Applet errors with 7u45

Hi,

If anyone could shed light on what's causing these errors, and if they 
are informational or the root cause of the Applet failure, I would 
really appreciate it! From the console log: -

(1)
ui: missing resource: java.util.MissingResourceException: Can't find 
resource for bundle com.sun.deploy.resources.Deployment,
key PERF: AppletExecutionRunnable - applet.init() BEGIN ;

This applet is loaded at run-time via <div>.innerHTML="<object>. . ."
No jnlp involved. Look no further than this?

(2)
liveconnect: Security Exception: JavaScript from 
http://127.0.0.1/employee_lookup.html attempted to access a resource it 
has no rights to. (No pop-up window as in 
https://blogs.oracle.com/java-platform-
group/entry/liveconnect_changes_in_7u45)

I have added the following lines to the manifest: -

Application-Name: Tier3Client
Permissions: sandbox
Caller-Allowable-Codebase: *

But I don't see "cache:  Read manifest for " till later.

(3)
ui: Pushing modality for applet ID 1 with dialog 
tier3Handshake.Tier3LogonAWT
basic: PluginMain.unregisterApplet: 1 from mananger 
sun.plugin2.applet.Applet2Manager@8c6afe
ui: plugin2manager.parentwindowDispose

What's happening?

Cheers Richard Maher

[toc] | [next] | [standalone]

#26379

On 10/19/2013 10:59 AM, Richard Maher wrote:
> liveconnect: Security Exception:

Ok, the Liveconnect security exception appears to be the winner 
(impacted by time-sensitive errors around the applet tear-down)

I'll come up with a small reproducer to test my suspicions about the 
innerHTML run-time dynamic load revealing the bug but can someone say if 
this manifest is acceptable from a Caller-Allowable-Codebase perspective: -

Manifest-Version: 1.0
Application-Name: Tier3Client
Permissions: sandbox
Created-By: 1.7.0_21 (Oracle Corporation)
Caller-Allowable-Codebase: * 127.0.0.1


I tried with just the wildcard and the addition of the localhost with no 
difference in behaviour. It doesn't seem to matter where I position that 
option in my TXT file it always seems to come out last in the MANIFEST.MF.

jar -cfm tier3Client.jar Manifest.txt tier3Client\*.class

Cheers Richard Maher

PS. Is there anyone who doesn't see the sense in 
Caller-Allowable-Codebase being a html <param > name and the stupidity 
of having it in the Manifest?

[toc] | [prev] | [next] | [standalone]

#26387

On 10/19/2013 12:32 PM, Richard Maher wrote:
> On 10/19/2013 10:59 AM, Richard Maher wrote:
>> liveconnect: Security Exception:
>
> Ok, the Liveconnect security exception appears to be the winner

Just keeps getting better :-(
https://addons.mozilla.org/en-US/firefox/blocked/p463

So I don't know if it was the browser(s), or the Applet being unsigned, 
or the Applet being loaded dynamically at run-time, that caused the new 
there-be-dragons pop-up not to be displayed but hosting the web-page in 
the same domain as the Applet works-around the problem.

It appears Caller-Allowable-Codebase only works if the Applet is signed 
by a certificate authority, but does that help if the web-site was 
loaded with http instead of httpS in the first place? And shouldn't 
Caller-Allowable-Codebase really be called 
Caller-Allowable-DOCUMENTbase? Look if this check ensured that only 
script files included in the HTML were from the same domain as the 
Applet then this could be brilliant, but it only seems interested in the 
unverified parent location :-(

To add insult to injury 9005723 did not make it in this release either. 
So you LiveConnect calls still can't pass Java arrays as arguments to 
JavaScript functions.

Cheers Richard Maher

[toc] | [prev] | [next] | [standalone]

#26393

"Richard Maher"  wrote in message news:l3vkdt$ab6$1@speranza.aioe.org...

[snip]

> Just keeps getting better :-(

Richard, it really *is* time for you to stop flogging that Applet "dead 
horse".

SERIOUSLY.

JavaFX FTW!

--
And loving it,

-Qu0ll (Rare, not extinct)
_________________________________________________
Qu0llSixFour@gmail.com
[Replace the "SixFour" with numbers to email me] 

[toc] | [prev] | [next] | [standalone]

#26403 — Do not go gentle into that good night

On 10/20/2013 5:21 PM, Qu0ll wrote:
> "Richard Maher"  wrote in message news:l3vkdt$ab6$1@speranza.aioe.org...
>
> [snip]
>
>> Just keeps getting better :-(
>
> Richard, it really *is* time for you to stop flogging that Applet "dead
> horse".
>
> SERIOUSLY.
>

https://bugzilla.mozilla.org/show_bug.cgi?id=914690

Great to see developers with a bit of heart and passion unlike the sad 
bags of shit that one finds here (and at Oracle).

> JavaFX FTW!

Grow a brain! Do you really think JavaFX is going to a real delousing 
shower???

>
> --
> And loving it,
>
> -Qu0ll (Rare, not extinct)
> _________________________________________________
> Qu0llSixFour@gmail.com
> [Replace the "SixFour" with numbers to email me]

[toc] | [prev] | [next] | [standalone]

#26404 — Re: Do not go gentle into that good night

"Richard Maher"  wrote in message news:l460u9$maa$1@speranza.aioe.org...

>> JavaFX FTW!
>
> Grow a brain! Do you really think JavaFX is going to a real delousing 
> shower???

So because I believe in JavaFX I don't have a brain? That's typical of the 
gutter-level comments you make when the technical argument gets beyond you 
or the facts contradict you.

JavaFX is actually very good and in the past 24 hours there have been 
comments from Oracle to the effect that they are working hard on getting it 
ported to iOS and Android.

As I said, JavaFX FTW!

--
And loving it,

-Qu0ll (Rare, not extinct)
_________________________________________________
Qu0llSixFour@gmail.com
[Replace the "SixFour" with numbers to email me] 

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.java.programmer

csiph-web