2015-09-10 Jiri Vanek <jvanek@redhat.com>
Pre-release tuning
* Makefile.am: (netx-html-gen.stamp) set number of changests to 40 (since 1.6.0)
* NEWS: date of 1.6.1 set
* configure.ac: (AC_INIT) set to use 1.6.1
2015-09-10 Jiri Vanek <jvanek@redhat.com>
* tests/netx/unit/net/sourceforge/jnlp/security/dialogs/apptrustwarningpanel/AppTrustWarningPanelTest.java:
Backuped, reset and restored .appletTrustSettings so its content can not affect test
2015-09-10 Jiri Vanek <jvanek@redhat.com>
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletTrustConfirmation.java:
(stripFileImp) fixed typo on variable of normlaized to normalized
2015-09-09 Jacob Wisor <gitne@icedtea.classpath.org>
* .hgignore: Fix regex patterns of files ignored by Mercurial
2015-09-09 Jacob Wisor <gitne@icedtea.classpath.org>
* ChangeLog: Fix spelling and formatting
2015-09-03 Jiri Vanek <jvanek@redhat.com>
Jacob Wisor <gitne@gmx.de>
Stefan Ring <stefan@complang.tuwien.ac.at>
Gathered and applied shards of DE translation
* netx/net/sourceforge/jnlp/resources/Messages_de.properties: added throng of keys
* AUTHORS: added Stefan Ring, stefan@complang.tuwien.ac.at
2015-09-03 Jiri Vanek <jvanek@redhat.com>
* NEWS: mentioned fixes for RH1233697, RH1233667 and reuse of MissingALACAdialog
for unsigned applications
2015-09-03 Jiri Vanek <jvanek@redhat.com>
Fixed ArrayIndexOutOfBound in version corner case issue
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageImpl.java:
length of array is checked,
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/impl/VersionRestrictionTest.java:
added tests for this case
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageImplTest.java:
(updateAppletActionTest1) adapted to version string
2015-09-03 Jiri Vanek <jvanek@redhat.com>
Added identifier to .appletTrustSettings to specify version of file
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageImpl.java:
added handling of version - readVersion, versionPreffix, backup, currentVersion.
(readLine) when first line is read, it is checked for version and acted. If
loaded version is missing or older then current 2, then file is not loaded.
otherwise normal loading. (writeContent) now inserts header with version.
(actOnVersionLoad) new method, handling consequences of recognized x current version
(backupOldFile) new method, backing up old file as .appletTrustSettings.version-backup
* netx/net/sourceforge/jnlp/util/UrlUtils.java: consumed exception during
normalization is logged only to console/verbose
* tests/netx/unit/net/sourceforge/jnlp/security/SecurityDialogsTest.java:
added considering of version
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/impl/LegacyUnsignedAppletActionStorageImplTest.java:
same
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageImplTest.java:
same
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/impl/VersionRestrictionTest.java:
new test file testing version recognition and processing
2015-09-02 Jiri Vanek <jvanek@redhat.com>
All UrlRegEx-es got unified and correct quoting
* netx/net/sourceforge/jnlp/controlpanel/UnsignedAppletActionTableModel.java:
(addRow) now uses factory methods of quoteAndStar form UrlRegEx
* netx/net/sourceforge/jnlp/controlpanel/UnsignedAppletsTrustingListPanel.java:
same, but of exact. Removed redundant space in APPEXTSECguiPanelTableInvalid key
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletActionEntry.java:
same of exact.
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletTrustConfirmation.java:
same
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageExtendedImpl.java:
same
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageImpl.java:
same
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UrlRegEx.java:
constructor made private, field final. Creation allowed over factory methods of
quote. quoteAndStar, exact. Added and iprved mehtods for visualisation
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/UrlRegExTest.java:
new test file with tests to new methods in UrlRegex
2015-09-02 Jiri Vanek <jvanek@redhat.com>
Newline characters are banned from saving to .appletTrustSettings
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/InvalidLineException.java:
New file. Exception to be specially handled if error appear in saved line.
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletActionEntry.java:
(serializeToReadableAndParseableString) if new-line appear in line,
InvalidLineException is thrown
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/impl/UnsignedAppletActionStorageImpl.java:
(writeContent) InvalidLineException is expected and logged.
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletTrustConfirmationTest.java:
adapted and quite a lot of tests added.
* tests/reproducers/simple/UnicodeLineBreak/resources/UnicodeLineBreak.java:
* tests/reproducers/simple/UnicodeLineBreak/srcs/UnicodeLineBreak.java:
* tests/reproducers/simple/UnicodeLineBreak/testcases/UnicodeLineBreakTests.java:
half automated reproducer of this behavior
* netx/net/sourceforge/jnlp/runtime/HtmlBoot.java: based on existence of -xml,
now can turn off tagsoup
* netx/net/sourceforge/jnlp/runtime/html/AppletExtractor.java: is passing
parsersettings to HtmlBoot
2015-09-01 Jiri Vanek <jvanek@redhat.com>
Saving of status of dialogs for "whole codebase" now includes also document base
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletTrustConfirmation.java:
(updateAppletAction) now saves base of docbase instead of .* "for remember for codebase"
stripFile - new method, ensuring docbase do not contains file
* tests/netx/unit/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletTrustConfirmationTest.java:
added testSripFile unit test for new method
* tests/reproducers/simple/FakeCodebase/resources/FakeCodebase.html.in:
* tests/reproducers/simple/FakeCodebase/resources/FakeCodebase.jnlp.in:
* tests/reproducers/simple/FakeCodebase/resources/OriginalCodebase.html:
* tests/reproducers/simple/FakeCodebase/resources/OriginalCodebase.jnlp:
* tests/reproducers/simple/FakeCodebase/srcs/FakeCodebase.java:
* tests/reproducers/simple/FakeCodebase/testcases/FakeCodebaseTests.java:
Reproducer of this behavior
2015-09-01 Jiri Vanek <jvanek@redhat.com>
application-library-allowable-codebase dialog made available for unsigned apps
* netx/net/sourceforge/jnlp/resources/Messages.properties: (ALACAMissingMainTitle)
added warning about possible consequences of resources out of docbase.
(ALACAMatchingMainTitle) the red higlights changed to green and added calming
words about it.
* netx/net/sourceforge/jnlp/resources/Messages_cs.properties: same
* netx/net/sourceforge/jnlp/resources/Messages_de.properties: same
* netx/net/sourceforge/jnlp/resources/Messages_pl.properties: adapted to red
to green recoloring
* netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java:
(checkApplicationLibraryAllowableCodebaseAttribute) removed return for in case
of unsigned app. Fixed check for all matching resources against codebase and docbase
If app is unsigned, then value in manifest is ignored. Missing alaca required
also in low security mode
* tests/netx/unit/net/sourceforge/jnlp/runtime/ManifestAttributesCheckerTest.java:
new file to test stripDocbase.
2015-09-01 Andrew Azores <aazores@redhat.com>
Add -defaultfile switch to PolicyEditor
* netx/net/sourceforge/jnlp/resources/Messages.properties
(PBODefaultFileFilePathSpecifiedError): new message
* netx/net/sourceforge/jnlp/security/policyeditor/PolicyEditor.java
(openDefaultButtonAction): refactor to use getDefaultPolicyFilePath
(getDefaultPolicyFilePath): new method
(getFilePathArgument): add -defaultfile switch support
2015-09-01 Andrew Azores <aazores@redhat.com>
Add texts for PolicyEditor's -defaultfile switch
* icedteaweb-completion: added -defaultfile to policyeditor options
* netx/net/sourceforge/jnlp/OptionsDefinitions.java: added DEFAULTFILE to
PolicyEditor options
* netx/net/sourceforge/jnlp/resources/Messages.properties
(PBODefaultFile): new message
2015-07-30 Andrew Azores <aazores@redhat.com>
PolicyEditor -file switch and main argument cannot be used in conjunction
* NEWS: add note
* netx/net/sourceforge/jnlp/resources/Messages.properties
(PEMainArgAndFileSwitchSpecifiedError): new message
* netx/net/sourceforge/jnlp/security/policyeditor/PolicyEditor.java
(main): die when both main arg and -file are given
(getFilePathArgument): new method
(cleanFilePathArgument): new method
2015-07-27 Jiri Vanek <jvanek@redhat.com>
Removed last remains of BOOT_DIR
* Makefile.am: declared and exported EXPORTED_JAR EXPORTED_KEYTOOL
EXPORTED_JARSIGNER EXPORTED_PACK200
* tests/reproducers/custom/AdditionalJarsInMetaInfIndexList/srcs/Makefile:
all of (BOOT_DIR)/bin/keytool (BOOT_DIR)/bin/jarsigner (BOOT_DIR)/bin/javac
(BOOT_DIR)/bin/jar (BOOT_DIR)/bin/pack200 replaced by (EXPORTED_KEYTOOL)
(EXPORTED_JARSIGNER) (EXPORTED_JAVAC) (EXPORTED_JAR) (EXPORTED_PACK200)
* tests/reproducers/custom/AppletExtendsFromOutsideJar/srcs/Makefile: same
* tests/reproducers/custom/ExtensionJnlpsInApplet/srcs/Makefile: same
* tests/reproducers/custom/JNLPClassLoaderDeadlock/srcs/Makefile: same
* tests/reproducers/custom/MixedSigningApplet/srcs/Makefile: same
* tests/reproducers/custom/MultipleSignaturesPerJar/srcs/Makefile: same
* tests/reproducers/custom/PackGZip/srcs/Makefile: same
* tests/reproducers/custom/PartiallySignedAppletManifestSpecifiesSandbox/srcs/Makefile:
same
* tests/reproducers/custom/SignedAppletCodebaseLoading/srcs/Makefile: same
* tests/reproducers/custom/SignedAppletExternalMainClass/srcs/Makefile: same
* tests/reproducers/custom/TrustedOnlyAttribute/srcs/Makefile: same
* tests/reproducers/custom/UnsignedContentInMETAINF/srcs/Makefile: same
2015-07-30 Jiri Vanek <jvanek@redhat.com>
replaced Trusted-only by Trusted-Only, cosmetic change in TrustedOnlyAttribute reproducer
* tests/reproducers/custom/TrustedOnlyAttribute/resources/TrustedOnlyAttribute-signed-nosecurity.jnlp:
* tests/reproducers/custom/TrustedOnlyAttribute/resources/TrustedOnlyAttribute-signed-security.jnlp:
* tests/reproducers/custom/TrustedOnlyAttribute/resources/TrustedOnlyAttribute-unsigned-nosecurity.jnlp:
* tests/reproducers/custom/TrustedOnlyAttribute/resources/TrustedOnlyAttribute-unsigned-security.jnlp:
* tests/reproducers/custom/TrustedOnlyAttribute/srcs/MANIFEST.MF:
2015-07-29 Jiri Vanek <jvanek@redhat.com>
Enabled and properly tested Entry-Point attribute check
* NEWS: mentioned enabling
* netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java: enabled
call to checkEntryPoint if enabled
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/resources/EntryPointSignedSingleBothInvalid.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/resources/EntryPointSignedSingleBothInvalid.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/resources/EntryPointSignedSingleBothInvalid_applet.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/resources/EntryPointSignedSingleBothInvalid_applet_security.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/resources/EntryPointSignedSingleBothInvalid_security.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/srcs/EntryPointSignedSingleBothInvalid.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/srcs/META-INF/MANIFEST.java:
* tests/reproducers/signed/EntryPointSignedSingleBothInvalid/testcases/EntryPointSignedSingleBothInvalidTest.java:
tests for Entry-Point with two values, both invalid
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk2.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk2.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk_applet1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk_applet2.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk_applet_security1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk_applet_security2.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk_security1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/resources/EntryPointSignedSingleBothOk_security2.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/srcs/EntryPointSignedSingleBothOk1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/srcs/EntryPointSignedSingleBothOk2.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/srcs/META-INF/MANIFEST.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/testcases/EntryPointSignedSingleBothOkTest1.java:
* tests/reproducers/signed/EntryPointSignedSingleBothOk/testcases/EntryPointSignedSingleBothOkTest2.java:
tests for Entry-Point with two values, both valid
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/resources/EntryPointSignedSingleFirstInvalidSecondOk.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/resources/EntryPointSignedSingleFirstInvalidSecondOk.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/resources/EntryPointSignedSingleFirstInvalidSecondOk_applet.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/resources/EntryPointSignedSingleFirstInvalidSecondOk_applet_security.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/resources/EntryPointSignedSingleFirstInvalidSecondOk_security.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/srcs/EntryPointSignedSingleFirstInvalidSecondOk.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/srcs/META-INF/MANIFEST.java:
* tests/reproducers/signed/EntryPointSignedSingleFirstInvalidSecondOk/testcases/EntryPointSignedSingleFirstInvalidSecondOkTest.java:
tests for Entry-Point with two values, first invalid, second ok
* tests/reproducers/signed/EntryPointSignedSingleInvalid/resources/EntryPointSignedSingleInvalid.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/resources/EntryPointSignedSingleInvalid.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/resources/EntryPointSignedSingleInvalid_applet.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/resources/EntryPointSignedSingleInvalid_applet_security.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/resources/EntryPointSignedSingleInvalid_security.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/srcs/EntryPointSignedSingleInvalid.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/srcs/META-INF/MANIFEST.java:
* tests/reproducers/signed/EntryPointSignedSingleInvalid/testcases/EntryPointSignedSingleInvalidTest.java:
tests for Entry-Point with one invalid value
* tests/reproducers/signed/EntryPointSignedSingleOk/resources/EntryPointSignedSingleOk.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/resources/EntryPointSignedSingleOk.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/resources/EntryPointSignedSingleOk_applet.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/resources/EntryPointSignedSingleOk_applet_security.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/resources/EntryPointSignedSingleOk_security.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/srcs/EntryPointSignedSingleOk.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/srcs/META-INF/MANIFEST.java:
* tests/reproducers/signed/EntryPointSignedSingleOk/testcases/EntryPointSignedSingleOkTest.java:
tests for Entry-Point with one ok value
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/resources/EntryPointSignedSingleSecondInvalidFirstOk.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/resources/EntryPointSignedSingleSecondInvalidFirstOk.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/resources/EntryPointSignedSingleSecondInvalidFirstOk_applet.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/resources/EntryPointSignedSingleSecondInvalidFirstOk_applet_security.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/resources/EntryPointSignedSingleSecondInvalidFirstOk_security.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/srcs/EntryPointSignedSingleSecondInvalidFirstOk.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/srcs/META-INF/MANIFEST.java:
* tests/reproducers/signed/EntryPointSignedSingleSecondInvalidFirstOk/testcases/EntryPointSignedSingleSecondInvalidFirstOkTest.java:
tests for Entry-Point with two values, first ok, second invalid
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/resources/EntryPointUnsignedSingleInvalid.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/resources/EntryPointUnsignedSingleInvalid.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/resources/EntryPointUnsignedSingleInvalid_applet.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/resources/EntryPointUnsignedSingleInvalid_applet_security.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/resources/EntryPointUnsignedSingleInvalid_security.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/srcs/EntryPointUnsignedSingleInvalid.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/srcs/META-INF/MANIFEST.java:
* tests/reproducers/simple/EntryPointUnsignedSingleInvalid/testcases/EntryPointUnsignedSingleInvalidTest.java:
tests for Entry-Point with one invalid value in unsigned jar (ignoring this value)
2015-07-22 Fridrich Strba <fridrich.strba@suse.com>
* Makefile.am: (generate-docs.stamp) added '-' to tail of tail command as
some implementations of tail parse the file information as the last argument
2015-07-20 Jiri Vanek <jvanek@redhat.com>
Tuned permissions attribute behavior for unsigned jnlps
* NEWS: change of permissions attribute mentioned in news
* netx/net/sourceforge/jnlp/runtime/ManifestAttributesChecker.java:
permissions sandbox and signed app and unsigned app with permissions all-permissions
now run in sandbox instead of not at all.
* tests/reproducers/signed/SandboxSignedSandbox/testcases/SandboxSignedSandboxTest.java:
Failing tests of (javawsAllPermNoSecurity) (javawsAppletAllPermNoSecurity)
with bug comment got removed this comment and are now passing
* tests/reproducers/simple/SandboxUnsignedAllPerm/testcases/SandboxUnsignedAllPermTest.java
Failing tests of (javawsAllPermNoSecurity) (javawsAppletAllPermNoSecurity)
with bug comment got removed this comment and are now passing
2015-07-20 Jiri Vanek <jvanek@redhat.com>
Added tests for signed applet/app using Permission attribute and for unsigned applet/app using Permission attribute
* tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.html
* tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm.jnlp
* tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet.jnlp
* tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_applet_security.jnlp
* tests/reproducers/signed/SandboxSignedAllPerm/resources/SandboxSignedAllPerm_security.jnlp
* tests/reproducers/signed/SandboxSignedAllPerm/srcs/META-INF/MANIFEST.MF
contains Permissions: all-permissions
* tests/reproducers/signed/SandboxSignedAllPerm/srcs/SandboxSignedAllPerm.java
* tests/reproducers/signed/SandboxSignedAllPerm/testcases/SandboxSignedAllPermTest.java
test cases with permissions in manifest check on
* tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid.html
* tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid.jnlp
* tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_applet.jnlp
* tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_applet_security.jnlp
* tests/reproducers/signed/SandboxSignedInvalid/resources/SandboxSignedInvalid_security.jnlp
* tests/reproducers/signed/SandboxSignedInvalid/srcs/META-INF/MANIFEST.MF
contains Permissions: invalidValue
* tests/reproducers/signed/SandboxSignedInvalid/srcs/SandboxSignedInvalid.java
* tests/reproducers/signed/SandboxSignedInvalid/testcases/SandboxSignedInvalidTest.java
test cases with permissions in manifest check on
* tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing.html
* tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing.jnlp
* tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_applet.jnlp
* tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_applet_security.jnlp
* tests/reproducers/signed/SandboxSignedMissing/resources/SandboxSignedMissing_security.jnlp
* tests/reproducers/signed/SandboxSignedMissing/srcs/META-INF/MANIFEST.MF
does not contains Permissions
* tests/reproducers/signed/SandboxSignedMissing/srcs/SandboxSignedMissing.java
* tests/reproducers/signed/SandboxSignedMissing/testcases/SandboxSignedMissingTest.java
test cases with permissions in manifest check on
* tests/reproducers/signed/SandboxSignedMissing/testcases/SandboxSignedMissingTestHighSecurity.java
test cases with permissions in manifest check on and on high security => interactive tests
with auto-reply
* tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox.html
* tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox.jnlp
* tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_applet.jnlp
* tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_applet_security.jnlp
* tests/reproducers/signed/SandboxSignedSandbox/resources/SandboxSignedSandbox_security.jnlp
* tests/reproducers/signed/SandboxSignedSandbox/srcs/META-INF/MANIFEST.MF
contains Permissions: sandbox
* tests/reproducers/signed/SandboxSignedSandbox/srcs/SandboxSignedSandbox.java
* tests/reproducers/signed/SandboxSignedSandbox/testcases/SandboxSignedSandboxTest.java
test cases with permissions in manifest check on. Contains two failing tests
currently itw with sandbox in manifest and jnlp not requesting permissions fails.
Bug to be fixed
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm.html
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm.jnlp
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_applet.jnlp
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_applet_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/resources/SandboxUnsignedAllPerm_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/srcs/META-INF/MANIFEST.MF
contains Permissions: all-permissions
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/srcs/SandboxUnsignedAllPerm.java
* tests/reproducers/unsigned/SandboxUnsignedAllPerm/testcases/SandboxUnsignedAllPermTest.java
test cases with permissions in manifest check on. There is probably an bug in impl.
The applet should not run at all, or javaws without permissions should run in sandbox too.
* tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid.html
* tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid.jnlp
* tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_applet.jnlp
* tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_applet_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedInvalid/resources/SandboxUnsignedInvalid_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedInvalid/srcs/META-INF/MANIFEST.MF
contains Permissions: invalidValue
* tests/reproducers/unsigned/SandboxUnsignedInvalid/srcs/SandboxUnsignedInvalid.java
* tests/reproducers/unsigned/SandboxUnsignedInvalid/testcases/SandboxUnsignedInvalidTest.java
test cases with permissions in manifest check on
* tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing.html
* tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing.jnlp
* tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_applet.jnlp
* tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_applet_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedMissing/resources/SandboxUnsignedMissing_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedMissing/srcs/META-INF/MANIFEST.MF
does not contains Permissions
* tests/reproducers/unsigned/SandboxUnsignedMissing/srcs/SandboxUnsignedMissing.java
* tests/reproducers/unsigned/SandboxUnsignedMissing/testcases/SandboxUnsignedMissingTest.java
test cases with permissions in manifest check on
* tests/reproducers/unsigned/SandboxUnsignedMissing/testcases/SandboxUnsignedMissingTestHighSecurity.java
test cases with permissions in manifest check on and on high security => interactive tests
with auto-reply
* tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox.html
* tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox.jnlp
* tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_applet.jnlp
* tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_applet_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedSandbox/resources/SandboxUnsignedSandbox_security.jnlp
* tests/reproducers/unsigned/SandboxUnsignedSandbox/srcs/META-INF/MANIFEST.MF
contains Permissions: sandbox
* tests/reproducers/unsigned/SandboxUnsignedSandbox/srcs/SandboxUnsignedSandbox.java
* tests/reproducers/unsigned/SandboxUnsignedSandbox/testcases/SandboxUnsignedSandboxTest.java
test cases with permissions in manifest check on.
2015-07-20 Jiri Vanek <jvanek@redhat.com>
Fixed download service
* netx/net/sourceforge/jnlp/runtime/JNLPClassLoader.java: (fillInPartJars)
for-each loop replaced by indexed loop to prevent ConcurrentModificationException
* tests/reproducers/signed/DownloadService/testcases/DownloadServiceTest.java:
small refactoring in favour of diamond operator
2015-06-25 Jiri Vanek <jvanek@redhat.com>
Fixed to short buttons for localized text - RH1231441
* NEWS: mentioned RH1231441
* netx/net/sourceforge/jnlp/security/dialogs/AppletWarningPane.java: removed
set of preferred sizes to minimal size
* netx/net/sourceforge/jnlp/security/dialogs/PasswordAuthenticationPane.java
same
* netx/net/sourceforge/jnlp/security/dialogs/CertWarningPane.java: same
* netx/net/sourceforge/jnlp/security/dialogs/MissingALACAttributePanel.java:
same
* netx/net/sourceforge/jnlp/security/dialogs/MissingPermissionsAttributePanel.java:
same
2015-06-15 Jiri Vanek <jvanek@redhat.com>
Updated NEWS, added javadoc fo security package
* NEWS: mentioned major work in last month and half
* netx/net/sourceforge/jnlp/security/package-info.java: new file, describing
flow of SecurityDialogMessage
2015-06-10 Jiri Vanek <jvanek@redhat.com>
Security dialogs got, moreover, unified dealing with trustNone/All and headless
* netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java: setTrustAll setTrustNone
made public so it can be used in testing.
* netx/net/sourceforge/jnlp/security/SecurityDialogs.java: all calls to show
security dialog now have correct introduction based on shouldPromptUser with
resolution based on trustAll. (shouldPromptUser) now takes also headless to
accounting.
* netx/net/sourceforge/jnlp/security/appletextendedsecurity/UnsignedAppletTrustConfirmation.java:
(checkUnsignedWithUserIfRequired) now react trustAll and trustNone
(checkPartiallySignedWithUserIfRequired) now react also trustAll
* tests/netx/unit/net/sourceforge/jnlp/security/SecurityDialogsTest.java: added
tests verifying adapted logic
2015-06-09 Jiri Vanek <jvanek@redhat.com>
Fixed issue, when desktop/menu shortcut created during -html mode, was not created like it
* netx/net/sourceforge/jnlp/runtime/Boot.java: setHtml(true) used when
command line contains html switch
* netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java: added html field and setter and getter
* netx/net/sourceforge/jnlp/util/XDesktopEntry.java: (getContentsAsReader) now
add -html if jnlpruntime.isHtml.
* tests/netx/unit/net/sourceforge/jnlp/util/XDesktopEntryTest.java: added tests for new
functionality
* Changelog: occurence of tab asterix slash replaced by tab asterix space in file
declarations
2015-06-09 Jiri Vanek <jvanek@redhat.com>
Fixed bug when generated desktop icon was not matched and user was asked for recreation
* netx/net/sourceforge/jnlp/util/XDesktopEntry.java: (getShortcutTmpFile)
(getLinuxDesktopIconFile) (getLinuxMenuIconFile) now generate file name by
same way. By new method getDesktopIconFileName which is using sanitizing
getDesktopIconName.
2015-05-27 Jiri Vanek <jvanek@redhat.com>
Improved caching of files obtained via query
* netx/net/sourceforge/jnlp/cache/CacheUtil.java: now consider also query(if any)
when creating file-name for item to be cached
* tests/netx/unit/net/sourceforge/jnlp/cache/CacheUtilTest.java: fixed old
tests due to change and added two new tests to test change.
* tests/netx/unit/net/sourceforge/jnlp/cache/ResourceDownloaderTest.java:
removed unused import.
2015-05-22 Jiri Vanek <jvanek@redhat.com>
Comments in deployment.properties now persists saving via itweb-settings
* netx/net/sourceforge/jnlp/config/DeploymentConfiguration.java: (loadComments)
new method. Saves every line starting with # char except date and
DEPLOYMENT_COMMENT. (load) This method is called before every load, and read lines
are stored. (save) Saved comments are inserted to other comments before call to
store.
* tests/netx/unit/net/sourceforge/jnlp/PluginBridgeTest.java: (countOccurences)
made public so it can be reused
* tests/netx/unit/net/sourceforge/jnlp/config/DeploymentConfigurationTest.java:
added tests to verify preserving of comments and non-multiplying date and
DEPLOYMENT_COMMENT
2015-05-22 Jiri Vanek <jvanek@redhat.com>
Removed garbage from htmls' width and height
* netx/net/sourceforge/jnlp/runtime/html/AppletParser.java: new method
(sanitizeSize) which remove all non digit content from string
* tests/netx/unit/net/sourceforge/jnlp/runtime/html/AppletParserTest.java:
new file, test for (sanitizeSize)
2015-05-04 Jie Kang <jkang@redhat.com>
Fix policyeditor file flag to work when used standalone
* netx/net/sourceforge/jnlp/security/policyeditor/PolicyEditor.java:
(main): filepath no longer set to null when file flag has parameter and
there is no main argument
2015-04-29 Jiri Vanek <jvanek@redhat.com>
1.6 post-release operations
* configure.ac: bumped (AC_INIT) to 1.6pre
* NEWS: Added 1.6.1 section,
2015-04-28 Jiri Vanek <jvanek@redhat.com>
Fixed incorrect usage of apostrophes in intro generation
* Makefile.am: (stamps/generate-docs.stamp) fixed redundant false in version
appearing in doc intro
2015-04-28 Jiri Vanek <jvanek@redhat.com>
Pre-release tuning
* Makefile.am: (netx-html-gen.stamp) set number of changests to 235 (since 1.5)
* NEWS: date of 1.6 set to 2015-04-29
* configure.ac: (AC_INIT) set to use 1.6
2015-04-28 Jiri Vanek <jvanek@redhat.com>
* README: updated to match current state.
2015-04-28 Jiri Vanek <jvanek@redhat.com>
Improved JDK9 detection
* acinclude.m4: (IT_CHECK_FOR_JDK) if found jdk is link, then it is printed
out also as resolved. (IT_CHECK_FOR_JRE) same, plus except classical JDK/jre
verification, also modular JRE is checked.
2015-04-27 Lukasz Dracz <ldracz@redhat.com>
Removed Executable Permissions from bash completion
* icedteaweb-completion
2015-04-24 Jiri Vanek <jvanek@redhat.com>
Fixed resource test to pass for CZ localization
* tests/netx/unit/net/sourceforge/jnlp/resources/MessagesPropertiesTest.java:
added four more items to whitelist.