Oracle returning null to getCodeBase() is a bug

Jerry Jongerius jerryj at duckware.com
Sun Sep 1 18:52:28 UTC 2013


Oracle claims the fix was 'security' related, and was required to prevent a 
sandboxed applet from obtaining access to "file path" information (the folder 
name where the applet is being run). But Oracle failed horrible, as explained 
in great detail here:

http://www.duckware.com/tech/java-security-clusterfuck.html

Google "java bug report" and submit a bug report to Oracle, as Oracle needs to 
fix this.




More information about the security-dev mailing list