[icedtea-web] RFC: PR612 - AccessControlException: access denied (java.util.PropertyPermission browser read)

[Omair Majid]

Hi,

The attached patch fixes PR612, by granting all applets (untrusted or 
trusted) permission to read the system properties "browser" and 
"browser.*". This makes the broken applet [1] work.

The plugin already has code in PluginMain.init() that sets the value of 
these browser.* properties; the attached patch just grants all 
applets/applications permissions to read it.

There are a number of web pages online which indicate that all 
applications should be granted these permissions, including [2].

ChangeLog:
2011-03-01  Omair Majid  <omajid at redhat.com>

     * netx/net/sourceforge/jnlp/SecurityDesc.java (sandboxPermissions):
     Add browser and browser.* PropertyPermissions.

Any thoughts or comments?

Cheers,
Omair

[1] 
http://www.netdania.com/Products/live-streaming-currency-exchange-rates/real-time-forex-charts/FinanceChart.aspx?m=c
[2] http://lists.apple.com/archives/java-dev/2006/May/msg00004.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pr612.patch
Type: text/x-patch
Size: 704 bytes
Desc: not available
Url : http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20110301/ba7f8e22/pr612.patch