[jira] [Updated] (PDFBOX-1946) Running within an Applet has many AccessControlException 's

["Fred Andrews (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/PDFBOX-1946?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Fred Andrews updated PDFBOX-1946:
---------------------------------

    Attachment: patch.zip

Took me a while to get back to this...

Attached is a zip file with 5 patch files that correct all the applet issues and security violations I found.  I had also needed to change 
   org\apache\pdfbox\pdmodel\graphics\color\PDColorState but that class seemed to have been deleted.

And to address your previous question, this was on a signed Applet.  The latest versions of Java seem to be more restrictive on what even signed Applets are allowed to do.

> Running within an Applet has many AccessControlException 's
> -----------------------------------------------------------
>
>                 Key: PDFBOX-1946
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-1946
>             Project: PDFBox
>          Issue Type: Wish
>    Affects Versions: 1.8.4
>         Environment: Running within an Applet
>            Reporter: Fred Andrews
>              Labels: Security
>         Attachments: patch.zip
>
>
> I've identified 6 modules that should be modified to avoid AccessControlException's while running within an Applet.  My solution would be to catch each AccessControlException and then use a default or continue on.  For most of these, that is probably the best solution, for a few especially PDFStreamEngine someone may have a better idea.
> The modules that have issues:
> pdfbox\pdfparser\BaseParser -- line 131 call to Boolean.getBoolean, line 170 call to Integer.getInteger
> pdfbox\util\PDFTextStripper -- line 79 call to System.getProperty()
> pdfbox\util\ResourceLoader -- line 67 call to getSystemClassLoader()
> pdfbox\pdmodel\graphics\color\PDColorState -- line 50, call to Color.getColor
> pdfbox/encoding/Encoding -- line 78, call to System.getProperty
> pdfbox\util\PDFStreamEngine -- Line 351 & 364 check for font == null (will be null if had resource loading problems)
> Not sure what the best way is to proceed.  Please advise.
> Thanks



--
This message was sent by Atlassian JIRA
(v6.2#6252)