[rfc][icedtea-web] set location for jnlpHreffed jnlp file correctly (rh1072013)

[Andrew Azores]

On 03/10/2014 10:08 AM, Jiri Vanek wrote:
> On 03/08/2014 04:58 AM, Andrew Azores wrote:
>> No, I don't think there's any way to make applets able to call 
>> System.exit() with the custom policies. Not with the way 
>> JNLPSecurityManager is currently written. I can't think of a valid 
>> reason an applet would need to be able to kill the JVM though... so I 
>> don't think it's worth modifying the security manager to allow this.
>>
> Well. I was thinking moreover if it is usable as workaround before 
> upstream removes the call.
>
> But this lead me to idea - why is system.exit not checked against 
> policies as all other stuff?
> But I can probably answer - because there is no such policy?
>

http://docs.oracle.com/javase/7/docs/api/java/lang/RuntimePermission.html

There is a permission that's meant for this (exitVM), but it's 
supposedly automatically granted, which implies any thread can exit the 
VM if it wants to. This would explain why JNLPSecurityManager doesn't 
rely on this permission to determine whether applets/applications are 
allowed to exit.

Thanks,

-- 
Andrew A