[icedtea-web] RFC: PR612 - AccessControlException: access denied (java.util.PropertyPermission browser read)

[Deepak Bhole]

* Omair Majid <omajid at redhat.com> [2011-03-01 20:15]:
> Hi,
> 
> The attached patch fixes PR612, by granting all applets (untrusted
> or trusted) permission to read the system properties "browser" and
> "browser.*". This makes the broken applet [1] work.
> 
> The plugin already has code in PluginMain.init() that sets the value
> of these browser.* properties; the attached patch just grants all
> applets/applications permissions to read it.
> 
> There are a number of web pages online which indicate that all
> applications should be granted these permissions, including [2].


Okay for HEAD and 1.0.

Deepak

> 
> ChangeLog:
> 2011-03-01  Omair Majid  <omajid at redhat.com>
> 
>     * netx/net/sourceforge/jnlp/SecurityDesc.java (sandboxPermissions):
>     Add browser and browser.* PropertyPermissions.
> 
> Any thoughts or comments?
> 
> Cheers,
> Omair
> 
> [1] http://www.netdania.com/Products/live-streaming-currency-exchange-rates/real-time-forex-charts/FinanceChart.aspx?m=c
> [2] http://lists.apple.com/archives/java-dev/2006/May/msg00004.html

> diff -r 11696140595f netx/net/sourceforge/jnlp/SecurityDesc.java
> --- a/netx/net/sourceforge/jnlp/SecurityDesc.java	Tue Mar 01 18:22:17 2011 -0500
> +++ b/netx/net/sourceforge/jnlp/SecurityDesc.java	Tue Mar 01 20:01:38 2011 -0500
> @@ -109,6 +109,8 @@
>              new PropertyPermission("javaplugin.*", "read"),
>              new PropertyPermission("jnlp.*", "read,write"),
>              new PropertyPermission("javaws.*", "read,write"),
> +            new PropertyPermission("browser", "read"),
> +            new PropertyPermission("browser.*", "read"),
>              new RuntimePermission("exitVM"),
>              new RuntimePermission("stopThread"),
>          // disabled because we can't at this time prevent an