/hg/release/icedtea-web-1.6: 3 new changesets
jvanek at icedtea.classpath.org
jvanek at icedtea.classpath.org
Mon Jul 20 13:54:43 UTC 2015
changeset eff1700654a4 in /hg/release/icedtea-web-1.6
details: http://icedtea.classpath.org/hg/release/icedtea-web-1.6?cmd=changeset;node=eff1700654a4
author: Jiri Vanek <jvanek at redhat.com>
date: Mon Jul 20 13:00:19 2015 +0200
Fixed download service
* netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java: (fillInPartJars) for-each loop replaced by indexed loop to prevent ConcurrentModificationException
* tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java: small refactoring in favour of diamond operator
changeset f5b19b402bf6 in /hg/release/icedtea-web-1.6
details: http://icedtea.classpath.org/hg/release/icedtea-web-1.6?cmd=changeset;node=f5b19b402bf6
author: Jiri Vanek <jvanek at redhat.com>
date: Mon Jul 20 15:22:38 2015 +0200
Added tests for signed applet/app using Permission attribute and for unsigned applet/app using Permission attribute
changeset cee19abe4dbd in /hg/release/icedtea-web-1.6
details: http://icedtea.classpath.org/hg/release/icedtea-web-1.6?cmd=changeset;node=cee19abe4dbd
author: Jiri Vanek <jvanek at redhat.com>
date: Mon Jul 20 15:54:20 2015 +0200
Tuned permissions attribute behavior for unsigned jnlps
* NEWS: change of permissions attribute mentioned in news
* netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java: permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all.
* tests/reproducers/signed/SandboxSignedSandbox/testcases/SandboxSignedSandboxTest.java: Failing tests of (javawsAllPermNoSecurity) (javawsAppletAllPermNoSecurity) with bug comment got removed this comment and are now passing
* tests/reproducers/simple/SandboxUnsignedAllPerm/testcases/SandboxUnsignedAllPermTest.java Failing tests of (javawsAllPermNoSecurity) (javawsAppletAllPermNoSecurity) with bug comment got removed this comment and are now passing
diffstat:
ChangeLog | 115 +++++
NEWS | 2 +
netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java | 5 +-
netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java | 6 +-
tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java | 8 +-
tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.html | 42 ++
tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.jnlp | 53 ++
tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet.jnlp | 58 ++
tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet_security.jnlp | 61 +++
tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_security.jnlp | 56 ++
tests/reproducers/signed/SandboxSignedAllPerm/srcs/META-INF/MANIFEST.MF | 3 +
tests/reproducers/signed/SandboxSignedAllPerm/srcs/SandboxSignedAllPerm.java | 57 ++
tests/reproducers/signed/SandboxSignedAllPerm/testcases/SandboxSignedAllPermTest.java | 123 ++++++
tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid.html | 42 ++
tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid.jnlp | 53 ++
tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_applet.jnlp | 58 ++
tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_applet_security.jnlp | 61 +++
tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_security.jnlp | 56 ++
tests/reproducers/signed/SandboxSignedInvalid/srcs/META-INF/MANIFEST.MF | 3 +
tests/reproducers/signed/SandboxSignedInvalid/srcs/SandboxSignedInvalid.java | 57 ++
tests/reproducers/signed/SandboxSignedInvalid/testcases/SandboxSignedInvalidTest.java | 125 ++++++
tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing.html | 42 ++
tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing.jnlp | 53 ++
tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_applet.jnlp | 58 ++
tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_applet_security.jnlp | 61 +++
tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_security.jnlp | 56 ++
tests/reproducers/signed/SandboxSignedMissing/srcs/META-INF/MANIFEST.MF | 2 +
tests/reproducers/signed/SandboxSignedMissing/srcs/SandboxSignedMissing.java | 57 ++
tests/reproducers/signed/SandboxSignedMissing/testcases/SandboxSignedMissingTest.java | 130 ++++++
tests/reproducers/signed/SandboxSignedMissing/testcases/SandboxSignedMissingTestHighSecurity.java | 195 ++++++++++
tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox.html | 42 ++
tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox.jnlp | 53 ++
tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_applet.jnlp | 58 ++
tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_applet_security.jnlp | 61 +++
tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_security.jnlp | 56 ++
tests/reproducers/signed/SandboxSignedSandbox/srcs/META-INF/MANIFEST.MF | 3 +
tests/reproducers/signed/SandboxSignedSandbox/srcs/SandboxSignedSandbox.java | 57 ++
tests/reproducers/signed/SandboxSignedSandbox/testcases/SandboxSignedSandboxTest.java | 126 ++++++
tests/reproducers/simple/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm.html | 42 ++
tests/reproducers/simple/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm.jnlp | 53 ++
tests/reproducers/simple/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_applet.jnlp | 58 ++
tests/reproducers/simple/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_applet_security.jnlp | 61 +++
tests/reproducers/simple/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_security.jnlp | 56 ++
tests/reproducers/simple/SandboxUnsignedAllPerm/srcs/META-INF/MANIFEST.MF | 3 +
tests/reproducers/simple/SandboxUnsignedAllPerm/srcs/SandboxUnsignedAllPerm.java | 57 ++
tests/reproducers/simple/SandboxUnsignedAllPerm/testcases/SandboxUnsignedAllPermTest.java | 116 +++++
tests/reproducers/simple/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid.html | 42 ++
tests/reproducers/simple/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid.jnlp | 53 ++
tests/reproducers/simple/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_applet.jnlp | 58 ++
tests/reproducers/simple/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_applet_security.jnlp | 61 +++
tests/reproducers/simple/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_security.jnlp | 56 ++
tests/reproducers/simple/SandboxUnsignedInvalid/srcs/META-INF/MANIFEST.MF | 3 +
tests/reproducers/simple/SandboxUnsignedInvalid/srcs/SandboxUnsignedInvalid.java | 57 ++
tests/reproducers/simple/SandboxUnsignedInvalid/testcases/SandboxUnsignedInvalidTest.java | 115 +++++
tests/reproducers/simple/SandboxUnsignedMissing/resources/SandboxUnsignedMissing.html | 42 ++
tests/reproducers/simple/SandboxUnsignedMissing/resources/SandboxUnsignedMissing.jnlp | 53 ++
tests/reproducers/simple/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_applet.jnlp | 58 ++
tests/reproducers/simple/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_applet_security.jnlp | 61 +++
tests/reproducers/simple/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_security.jnlp | 56 ++
tests/reproducers/simple/SandboxUnsignedMissing/srcs/META-INF/MANIFEST.MF | 2 +
tests/reproducers/simple/SandboxUnsignedMissing/srcs/SandboxUnsignedMissing.java | 57 ++
tests/reproducers/simple/SandboxUnsignedMissing/testcases/SandboxUnsignedMissingTest.java | 120 ++++++
tests/reproducers/simple/SandboxUnsignedMissing/testcases/SandboxUnsignedMissingTestHighSecurity.java | 177 +++++++++
tests/reproducers/simple/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox.html | 42 ++
tests/reproducers/simple/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox.jnlp | 53 ++
tests/reproducers/simple/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_applet.jnlp | 58 ++
tests/reproducers/simple/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_applet_security.jnlp | 61 +++
tests/reproducers/simple/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_security.jnlp | 56 ++
tests/reproducers/simple/SandboxUnsignedSandbox/srcs/META-INF/MANIFEST.MF | 3 +
tests/reproducers/simple/SandboxUnsignedSandbox/srcs/SandboxUnsignedSandbox.java | 57 ++
tests/reproducers/simple/SandboxUnsignedSandbox/testcases/SandboxUnsignedSandboxTest.java | 116 +++++
71 files changed, 4109 insertions(+), 8 deletions(-)
diffs (truncated from 4471 to 500 lines):
diff -r aeeea7de3494 -r cee19abe4dbd ChangeLog
--- a/ChangeLog Thu Jun 25 12:11:56 2015 +0200
+++ b/ChangeLog Mon Jul 20 15:54:20 2015 +0200
@@ -1,3 +1,118 @@
+2015-07-20 Jiri Vanek <jvanek at redhat.com>
+
+ Tuned permissions attribute behavior for unsigned jnlps
+ * NEWS: change of permissions attribute mentioned in news
+ * netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java:
+ permissions sandbox and signed app and unsigned app with permissions all-permissions
+ now run in sandbox instead of not at all.
+ * tests/reproducers/signed/SandboxSignedSandbox/testcases/SandboxSignedSandboxTest.java:
+ Failing tests of (javawsAllPermNoSecurity) (javawsAppletAllPermNoSecurity)
+ with bug comment got removed this comment and are now passing
+ * tests/reproducers/simple/SandboxUnsignedAllPerm/testcases/SandboxUnsignedAllPermTest.java
+ Failing tests of (javawsAllPermNoSecurity) (javawsAppletAllPermNoSecurity)
+ with bug comment got removed this comment and are now passing
+
+2015-07-20 Jiri Vanek <jvanek at redhat.com>
+
+ Added tests for signed applet/app using Permission attribute and for unsigned applet/app using Permission attribute
+ * tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.html
+ * tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.jnlp
+ * tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet.jnlp
+ * tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet_security.jnlp
+ * tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_security.jnlp
+ * tests/reproducers/signed/SandboxSignedAllPerm/srcs/META-INF/MANIFEST.MF
+ contains Permissions: all-permissions
+ * tests/reproducers/signed/SandboxSignedAllPerm/srcs/SandboxSignedAllPerm.java
+ * tests/reproducers/signed/SandboxSignedAllPerm/testcases/SandboxSignedAllPermTest.java
+ testcases with permissions in manifest check on
+ * tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid.html
+ * tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid.jnlp
+ * tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_applet.jnlp
+ * tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_applet_security.jnlp
+ * tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_security.jnlp
+ * tests/reproducers/signed/SandboxSignedInvalid/srcs/META-INF/MANIFEST.MF
+ contains Permissions: invalidValue
+ * tests/reproducers/signed/SandboxSignedInvalid/srcs/SandboxSignedInvalid.java
+ * tests/reproducers/signed/SandboxSignedInvalid/testcases/SandboxSignedInvalidTest.java
+ testcases with permissions in manifest check on
+ * tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing.html
+ * tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing.jnlp
+ * tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_applet.jnlp
+ * tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_applet_security.jnlp
+ * tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_security.jnlp
+ * tests/reproducers/signed/SandboxSignedMissing/srcs/META-INF/MANIFEST.MF
+ does not contains Permissions
+ * tests/reproducers/signed/SandboxSignedMissing/srcs/SandboxSignedMissing.java
+ * tests/reproducers/signed/SandboxSignedMissing/testcases/SandboxSignedMissingTest.java
+ testcases with permissions in manifest check on
+ * tests/reproducers/signed/SandboxSignedMissing/testcases/SandboxSignedMissingTestHighSecurity.java
+ testcases with permissions in manifest check on and on high security => interactive tests
+ with autoreply
+ * tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox.html
+ * tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox.jnlp
+ * tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_applet.jnlp
+ * tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_applet_security.jnlp
+ * tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_security.jnlp
+ * tests/reproducers/signed/SandboxSignedSandbox/srcs/META-INF/MANIFEST.MF
+ contains Permissions: sandbox
+ * tests/reproducers/signed/SandboxSignedSandbox/srcs/SandboxSignedSandbox.java
+ * tests/reproducers/signed/SandboxSignedSandbox/testcases/SandboxSignedSandboxTest.java
+ testcases with permissions in manifest check on. Contains two failing tests
+ currently itw with snadbox in manifest and jnlp not requesting permissions fails.
+ Bug to be fixed
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm.html
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_applet.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_applet_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/srcs/META-INF/MANIFEST.MF
+ contains Permissions: all-permissions
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/srcs/SandboxUnsignedAllPerm.java
+ * tests/reproducers/unsigned/SandboxUnsignedAllPerm/testcases/SandboxUnsignedAllPermTest.java
+ testcases with permissions in manifest check on. There is probably an bug in impl.
+ The applet should not run at all, or javaws without permissions should runin sandbox too.
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid.html
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_applet.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_applet_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/srcs/META-INF/MANIFEST.MF
+ contains Permissions: invalidValue
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/srcs/SandboxUnsignedInvalid.java
+ * tests/reproducers/unsigned/SandboxUnsignedInvalid/testcases/SandboxUnsignedInvalidTest.java
+ testcases with permissions in manifest check on
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing.html
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_applet.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_applet_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/srcs/META-INF/MANIFEST.MF
+ does not contains Permissions
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/srcs/SandboxUnsignedMissing.java
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/testcases/SandboxUnsignedMissingTest.java
+ testcases with permissions in manifest check on
+ * tests/reproducers/unsigned/SandboxUnsignedMissing/testcases/SandboxUnsignedMissingTestHighSecurity.java
+ testcases with permissions in manifest check on and on high security => interactive tests
+ with autoreply
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox.html
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_applet.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_applet_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_security.jnlp
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/srcs/META-INF/MANIFEST.MF
+ contains Permissions: sandbox
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/srcs/SandboxUnsignedSandbox.java
+ * tests/reproducers/unsigned/SandboxUnsignedSandbox/testcases/SandboxUnsignedSandboxTest.java
+ testcases with permissions in manifest check on.
+
+2015-07-20 Jiri Vanek <jvanek at redhat.com>
+
+ Fixed download service
+ * netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java: (fillInPartJars)
+ for-each loop replaced by indexed loop to prevent ConcurrentModificationException
+ * tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java:
+ small refactoring in favour of diamond operator
+
2015-06-25 Jiri Vanek <jvanek at redhat.com>
Fixed to short buttons for localized text - RH1231441
diff -r aeeea7de3494 -r cee19abe4dbd NEWS
--- a/NEWS Thu Jun 25 12:11:56 2015 +0200
+++ b/NEWS Mon Jul 20 15:54:20 2015 +0200
@@ -9,6 +9,8 @@
CVE-XXXX-YYYY: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=XXXX-YYYY
New in release 1.6.1 (2015-MM-DD):
+* permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all.
+* fixed DownloadService
* fixed bug in caching of files with query
* fixed issues with recreating of existing shortcut
* trustAll/trustNone now processed correctly
diff -r aeeea7de3494 -r cee19abe4dbd netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java
--- a/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java Thu Jun 25 12:11:56 2015 +0200
+++ b/netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java Mon Jul 20 15:54:20 2015 +0200
@@ -1209,8 +1209,9 @@
* @param jars jar archives to be added
*/
protected void fillInPartJars(List<JARDesc> jars) {
- for (JARDesc desc : jars) {
- String part = desc.getPart();
+ //can not use iterator, will rise ConcurrentModificationException on jars.add(jar);
+ for (int x = 0 ; x< jars.size() ; x++) {
+ String part = jars.get(x).getPart();
// "available" field can be affected by two different threads
// working in loadClass(String)
diff -r aeeea7de3494 -r cee19abe4dbd netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java
--- a/netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java Thu Jun 25 12:11:56 2015 +0200
+++ b/netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java Mon Jul 20 15:54:20 2015 +0200
@@ -295,10 +295,12 @@
} else { // JNLP
if (isNoneOrDefault(requestedPermissions)) {
if (sandboxForced == ManifestBoolean.TRUE && signing != SigningState.NONE) {
- throw new LaunchException("The 'permissions' attribute is '" + file.getManifestsAttributes().permissionsToString() + "' and the applet is signed. This is fatal.");
+ OutputController.getLogger().log(OutputController.Level.WARNING_ALL, "The 'permissions' attribute is '" + file.getManifestsAttributes().permissionsToString() + "' and the applet is signed. Forcing sandbox.");
+ securityDelegate.setRunInSandbox();
}
if (sandboxForced == ManifestBoolean.FALSE && signing == SigningState.NONE) {
- throw new LaunchException("The 'permissions' attribute is '" + file.getManifestsAttributes().permissionsToString() + "' and the applet is unsigned. This is fatal.");
+ OutputController.getLogger().log(OutputController.Level.WARNING_ALL, "The 'permissions' attribute is '" + file.getManifestsAttributes().permissionsToString() + "' and the applet is unsigned. Forcing sandbox.");
+ securityDelegate.setRunInSandbox();
}
}
}
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java
--- a/tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java Thu Jun 25 12:11:56 2015 +0200
+++ b/tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java Mon Jul 20 15:54:20 2015 +0200
@@ -48,11 +48,11 @@
import org.junit.Test;
public class DownloadServiceTest {
- private static ServerAccess server = new ServerAccess();
+ private static final ServerAccess server = new ServerAccess();
private final String exitString = "Exiting DownloadService..";
- private static List<String> checkCache = new ArrayList<String>();
- private static List<String> manageJnlpResources = new ArrayList<String>();
- private static List<String> manageExternalResources = new ArrayList<String>();
+ private static final List<String> checkCache = new ArrayList<>();
+ private static final List<String> manageJnlpResources = new ArrayList<>();
+ private static final List<String> manageExternalResources = new ArrayList<>();
@BeforeClass
public static void initalizeClass() throws MalformedURLException {
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.html
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.html Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,42 @@
+<!--
+
+This file is part of IcedTea.
+
+IcedTea is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2, or (at your option)
+any later version.
+
+IcedTea is distributed in the hope that it will be useful, but
+WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with IcedTea; see the file COPYING. If not, write to the
+Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+02110-1301 USA.
+
+Linking this library statically or dynamically with other modules is
+making a combined work based on this library. Thus, the terms and
+conditions of the GNU General Public License cover the whole
+combination.
+
+As a special exception, the copyright holders of this library give you
+permission to link this library with independent modules to produce an
+executable, regardless of the license terms of these independent
+modules, and to copy and distribute the resulting executable under
+terms of your choice, provided that you also meet, for each linked
+independent module, the terms and conditions of the license of that
+module. An independent module is a module which is not derived from
+or based on this library. If you modify this library, you may extend
+this exception to your version of the library, but you are not
+obligated to do so. If you do not wish to do so, delete this
+exception statement from your version.
+
+ -->
+<html><head></head><body bgcolor="red">
+<p><applet code="SandboxSignedAllPerm.class" archive="SandboxSignedAllPerm.jar" codebase="." width="250" height="200">
+</applet></p>
+</body>
+</html>
\ No newline at end of file
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.jnlp
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.jnlp Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,53 @@
+<!--
+
+This file is part of IcedTea.
+
+IcedTea is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2, or (at your option)
+any later version.
+
+IcedTea is distributed in the hope that it will be useful, but
+WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with IcedTea; see the file COPYING. If not, write to the
+Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+02110-1301 USA.
+
+Linking this library statically or dynamically with other modules is
+making a combined work based on this library. Thus, the terms and
+conditions of the GNU General Public License cover the whole
+combination.
+
+As a special exception, the copyright holders of this library give you
+permission to link this library with independent modules to produce an
+executable, regardless of the license terms of these independent
+modules, and to copy and distribute the resulting executable under
+terms of your choice, provided that you also meet, for each linked
+independent module, the terms and conditions of the license of that
+module. An independent module is a module which is not derived from
+or based on this library. If you modify this library, you may extend
+this exception to your version of the library, but you are not
+obligated to do so. If you do not wish to do so, delete this
+exception statement from your version.
+
+ -->
+<?xml version="1.0" encoding="utf-8"?>
+<jnlp spec="1.0" href="SandboxSignedAllPerm.jnlp" codebase=".">
+ <information>
+ <title>SandboxSignedAllPerm</title>
+ <vendor>IcedTea</vendor>
+ <homepage href="http://icedtea.classpath.org/wiki/IcedTea-Web#Testing_IcedTea-Web"/>
+ <description>SandboxSignedAllPerm</description>
+ <offline/>
+ </information>
+ <resources>
+ <j2se version="1.4+"/>
+ <jar href="SandboxSignedAllPerm.jar"/>
+ </resources>
+ <application-desc main-class="SandboxSignedAllPerm">
+ </application-desc>
+</jnlp>
\ No newline at end of file
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet.jnlp
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet.jnlp Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,58 @@
+<!--
+
+This file is part of IcedTea.
+
+IcedTea is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2, or (at your option)
+any later version.
+
+IcedTea is distributed in the hope that it will be useful, but
+WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with IcedTea; see the file COPYING. If not, write to the
+Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+02110-1301 USA.
+
+Linking this library statically or dynamically with other modules is
+making a combined work based on this library. Thus, the terms and
+conditions of the GNU General Public License cover the whole
+combination.
+
+As a special exception, the copyright holders of this library give you
+permission to link this library with independent modules to produce an
+executable, regardless of the license terms of these independent
+modules, and to copy and distribute the resulting executable under
+terms of your choice, provided that you also meet, for each linked
+independent module, the terms and conditions of the license of that
+module. An independent module is a module which is not derived from
+or based on this library. If you modify this library, you may extend
+this exception to your version of the library, but you are not
+obligated to do so. If you do not wish to do so, delete this
+exception statement from your version.
+
+ -->
+<?xml version="1.0" encoding="utf-8"?>
+<jnlp spec="1.0" href="SandboxSignedAllPerm_applet.jnlp" codebase=".">
+ <information>
+ <title>SandboxSignedAllPerm</title>
+ <vendor>IcedTea</vendor>
+ <homepage href="http://icedtea.classpath.org/wiki/IcedTea-Web#Testing_IcedTea-Web"/>
+ <description>SandboxSignedAllPerm</description>
+ <offline/>
+ </information>
+ <resources>
+ <j2se version="1.4+"/>
+ <jar href="SandboxSignedAllPerm.jar"/>
+ </resources>
+ <applet-desc
+ documentBase="."
+ name="SandboxSignedAllPerm"
+ main-class="SandboxSignedAllPerm"
+ width="250"
+ height="200">
+ </applet-desc>
+</jnlp>
\ No newline at end of file
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet_security.jnlp
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet_security.jnlp Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,61 @@
+<!--
+
+This file is part of IcedTea.
+
+IcedTea is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2, or (at your option)
+any later version.
+
+IcedTea is distributed in the hope that it will be useful, but
+WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with IcedTea; see the file COPYING. If not, write to the
+Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+02110-1301 USA.
+
+Linking this library statically or dynamically with other modules is
+making a combined work based on this library. Thus, the terms and
+conditions of the GNU General Public License cover the whole
+combination.
+
+As a special exception, the copyright holders of this library give you
+permission to link this library with independent modules to produce an
+executable, regardless of the license terms of these independent
+modules, and to copy and distribute the resulting executable under
+terms of your choice, provided that you also meet, for each linked
+independent module, the terms and conditions of the license of that
+module. An independent module is a module which is not derived from
+or based on this library. If you modify this library, you may extend
+this exception to your version of the library, but you are not
+obligated to do so. If you do not wish to do so, delete this
+exception statement from your version.
+
+-->
+<?xml version="1.0" encoding="utf-8"?>
+<jnlp spec="1.0" href="SandboxSignedAllPerm_applet_security.jnlp" codebase=".">
+ <information>
+ <title>SandboxSignedAllPerm</title>
+ <vendor>IcedTea</vendor>
+ <homepage href="http://icedtea.classpath.org/wiki/IcedTea-Web#Testing_IcedTea-Web"/>
+ <description>SandboxSignedAllPerm</description>
+ <offline/>
+ </information>
+ <resources>
+ <j2se version="1.4+"/>
+ <jar href="SandboxSignedAllPerm.jar"/>
+ </resources>
+ <security>
+ <all-permissions/>
+ </security>
+ <applet-desc
+ documentBase="."
+ name="SandboxSignedAllPerm"
+ main-class="SandboxSignedAllPerm"
+ width="250"
+ height="200">
+ </applet-desc>
+</jnlp>
\ No newline at end of file
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_security.jnlp
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_security.jnlp Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,56 @@
+<!--
+
+This file is part of IcedTea.
+
+IcedTea is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2, or (at your option)
+any later version.
+
+IcedTea is distributed in the hope that it will be useful, but
+WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+General Public License for more details.
+
+You should have received a copy of the GNU General Public License
+along with IcedTea; see the file COPYING. If not, write to the
+Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+02110-1301 USA.
+
+Linking this library statically or dynamically with other modules is
+making a combined work based on this library. Thus, the terms and
+conditions of the GNU General Public License cover the whole
+combination.
+
+As a special exception, the copyright holders of this library give you
+permission to link this library with independent modules to produce an
+executable, regardless of the license terms of these independent
+modules, and to copy and distribute the resulting executable under
+terms of your choice, provided that you also meet, for each linked
+independent module, the terms and conditions of the license of that
+module. An independent module is a module which is not derived from
+or based on this library. If you modify this library, you may extend
+this exception to your version of the library, but you are not
+obligated to do so. If you do not wish to do so, delete this
+exception statement from your version.
+
+ -->
+<?xml version="1.0" encoding="utf-8"?>
+<jnlp spec="1.0" href="SandboxSignedAllPerm_security.jnlp" codebase=".">
+ <information>
+ <title>SandboxSignedAllPerm</title>
+ <vendor>IcedTea</vendor>
+ <homepage href="http://icedtea.classpath.org/wiki/IcedTea-Web#Testing_IcedTea-Web"/>
+ <description>SandboxSignedAllPerm</description>
+ <offline/>
+ </information>
+ <resources>
+ <j2se version="1.4+"/>
+ <jar href="SandboxSignedAllPerm.jar"/>
+ </resources>
+ <security>
+ <all-permissions/>
+ </security>
+ <application-desc main-class="SandboxSignedAllPerm">
+ </application-desc>
+</jnlp>
\ No newline at end of file
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/srcs/META-INF/MANIFEST.MF
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/srcs/META-INF/MANIFEST.MF Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,3 @@
+Manifest-Version: 1.0
+Permissions: all-permissions
+
diff -r aeeea7de3494 -r cee19abe4dbd tests/reproducers/signed/SandboxSignedAllPerm/srcs/SandboxSignedAllPerm.java
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/tests/reproducers/signed/SandboxSignedAllPerm/srcs/SandboxSignedAllPerm.java Mon Jul 20 15:54:20 2015 +0200
@@ -0,0 +1,57 @@
+
+import java.applet.Applet;
+
+/* AppletTest.java
+ Copyright (C) 2011 Red Hat, Inc.
+
+ This file is part of IcedTea.
+
More information about the distro-pkg-dev
mailing list