pdfbox-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tilman Hausherr (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (PDFBOX-2397) Running within an Applet throws an AccessControlException
Date Mon, 03 Nov 2014 19:40:34 GMT

    [ https://issues.apache.org/jira/browse/PDFBOX-2397?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14194974#comment-14194974
] 

Tilman Hausherr commented on PDFBOX-2397:
-----------------------------------------

Yes, for cases where we expect an exception anyway. But that code still throws a SecurityException
(which is not a PrivilegedActionException) if the applet doesn't have the permissions.

The problem why I've done nothing in this issue (that is easy to solve) is that I want a response
from [~bgillis] first. He said "You don't need to put it between a try/catch statement as
it doesn't throw any exception" and I do get an exception. He knows more about applets than
me so I'd like to have an agreement on this before making any changes.

> Running within an Applet throws an AccessControlException
> ---------------------------------------------------------
>
>                 Key: PDFBOX-2397
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-2397
>             Project: PDFBox
>          Issue Type: Bug
>          Components: PDModel
>    Affects Versions: 1.8.7
>         Environment: JRE 7u67 or JRE 6u45 (Windows 7 SP1 64bit)
>            Reporter: Bertrand Gillis
>            Assignee: Tilman Hausherr
>             Fix For: 1.8.8
>
>
> As soon as PDFBox is embedded in a signed applet, the following exception is thrown when
I try to print a PDF document through PDFBox:
> {code}
> Caused by: java.security.AccessControlException: access denied ("java.util.PropertyPermission"
"org.apache.pdfbox.ICC_override_color" "read")
> 	at java.security.AccessControlContext.checkPermission(Unknown Source)
> 	at java.security.AccessController.checkPermission(Unknown Source)
> 	at java.lang.SecurityManager.checkPermission(Unknown Source)
> 	at sun.plugin2.applet.AWTAppletSecurityManager.checkPermission(Unknown Source)
> 	at java.lang.SecurityManager.checkPropertyAccess(Unknown Source)
> 	at java.lang.System.getProperty(Unknown Source)
> 	at java.lang.Integer.getInteger(Unknown Source)
> 	at java.lang.Integer.getInteger(Unknown Source)
> 	at java.awt.Color.getColor(Unknown Source)
> 	at java.awt.Color.getColor(Unknown Source)
> 	at org.apache.pdfbox.pdmodel.graphics.color.PDColorState.<clinit>(PDColorState.java:50)
> {code}
> This issue was also in previous PDFBox versions for the following instruction:
> {code:title=BaseParser.java}
> FORCE_PARSING = Boolean.getBoolean("org.apache.pdfbox.forceParsing");
> {code}
> But it was fixed in later versions:
> {code:title=BaseParser.java}
>   static {
>     try {
>       FORCE_PARSING = Boolean.getBoolean("org.apache.pdfbox.forceParsing");
>     }
>     catch (SecurityException e) {}
>   }
> {code}
> This fixed is unfortunately not set for the current property:
> {code:title=PDColorState.java}
> private static volatile Color iccOverrideColor = Color.getColor("org.apache.pdfbox.ICC_override_color");
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message