Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix PR1299: WebStart doesn't read socket proxy settings from firefox correctly | Adam Domurad | 2013-04-23 | 1 | -0/+1 |
| | |||||
* | Fixed CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets ↵ | Jiri Vanek | 2013-04-17 | 1 | -0/+1 |
| | | | | with same relative-path. | ||||
* | Fixed gifar vulnereability with automated testcase | Jiri Vanek | 2013-04-17 | 1 | -0/+1 |
| | |||||
* | Added help for extended applets security and settings | Jiri Vanek | 2013-04-12 | 1 | -0/+1 |
| | |||||
* | Added dialogue to allow setting of custom JRE | Jiri Vanek | 2013-04-12 | 1 | -2/+4 |
| | |||||
* | Udated news for DE transaltion and Authors for Jacob | Jiri Vanek | 2013-03-13 | 1 | -0/+1 |
| | |||||
* | Fix PR580: http://www.horaoficial.cl/ loads improperly. | Adam Domurad | 2013-02-13 | 1 | -0/+1 |
| | |||||
* | Fix for PR1292: Javaws does not resolve versioned jar names with periods ↵ | Adam Domurad | 2013-01-30 | 1 | -0/+1 |
| | | | | properly | ||||
* | Fix PR1157: Applets can hang browser after fatal exception | Adam Domurad | 2013-01-28 | 1 | -0/+1 |
| | |||||
* | PR1260: IcedTea-Web should not rely on GTK | Deepak Bhole | 2013-01-16 | 1 | -0/+1 |
| | |||||
* | Fix for PR1198: JSObject passed incorrectly to Javascript | Adam Domurad | 2013-01-15 | 1 | -0/+1 |
| | |||||
* | Download indicator made compact for more then one jar | Jiri Vanek | 2013-01-10 | 1 | -0/+1 |
| | |||||
* | All IcedTea-Web dialogues are centered to middle of active screen | Jiri Vanek | 2013-01-10 | 1 | -0/+1 |
| | | | | | | Active screen in this context is the one, where the mouse is presented or default when no mouse presention detected. Patch is affecteing only IcedTea-Web custom dialogues. | ||||
* | First part of fix of recreating desktop icon | Jiri Vanek | 2013-01-10 | 1 | -0/+1 |
| | | | | Another fix can be addition of buttons like always/never | ||||
* | PR909: URL is invalid after normalization | Saad Mohammad | 2012-12-20 | 1 | -0/+1 |
| | |||||
* | PR1189: Icedtea-plugin requires code attribute when using jnlp_href | Saad Mohammad | 2012-12-10 | 1 | -0/+1 |
| | |||||
* | PR1217: Add command line arguments for plugins | Saad Mohammad | 2012-12-05 | 1 | -0/+1 |
| | |||||
* | Fix PR1166: Embedded JNLP File is not supported in applet tag | Saad Mohammad | 2012-11-13 | 1 | -0/+1 |
| | |||||
* | Add NEWS entry for PR1027 | Saad Mohammad | 2012-11-08 | 1 | -0/+2 |
| | |||||
* | Added cz_CS locales with test | Jiri Vanek | 2012-11-02 | 1 | -0/+1 |
| | |||||
* | Splashscreen integrated to javaws and plugin | Jiri Vanek | 2012-11-02 | 1 | -0/+1 |
| | |||||
* | PR1186: System.getProperty("deployment.user.security.trusted.cacerts") is null | Omair Majid | 2012-10-29 | 1 | -0/+1 |
| | | | | | Copy deployment configration read into system properties so it is visibile to target programs. | ||||
* | Major rework of JarCertVerifier certificate management. | Danesh Dadachanji | 2012-10-22 | 1 | -0/+1 |
| | | | | | | This is a long-planned rework of JarCertVerifier, allowing it to handle multiple certificates. The algorithms used to verify jars with multiple certificates vary between JNLPs and Applets. | ||||
* | PR1145: IcedTea-Web can cause ClassCircularityError | Omair Majid | 2012-10-05 | 1 | -0/+1 |
| | | | | | | | | | | | | | | | | | | | It is possible for the ClassLoader to encounter a ClassCircularityError. This can happen when the ClassLoader detects that checking if a class 'A' has been loaded triggers another check of whether 'A' has been loaded before the first check has completed. This can happen easily when trying to load Policy or Permission classes, which lie in our code path that checks whether a class has been loaded. One possible fix is to ensure these classes are not in the path of code that gets executed when we are trying to check for a class. This can be done by removing the call to getAccessControlContextForClassLoading. The javadocs for ClassLoader.findLoadedClass do not mention any permissions required to call the method nor do they mention that the method can throw a SecurityException. The native code that implements findLoadedClass does not have any security checks either. The doProvileged block is probably not needed here and removing it breaks the circularity. | ||||
* | PR1161: X509VariableTrustManager does not work correctly with OpenJDK7 | Deepak Bhole | 2012-09-17 | 1 | -0/+1 |
| | |||||
* | Fix for PR920: Classes attempted to load twice when class extends from ↵ | Adam Domurad | 2012-08-28 | 1 | -0/+1 |
| | | | | outside jar | ||||
* | Fixes PR588, Icedtea-web now saves cookies set in java cookie jar | Adam Domurad | 2012-08-17 | 1 | -0/+1 |
| | |||||
* | Fix PR955: regression: SweetHome3D fails to run | Danesh Dadachanji | 2012-08-08 | 1 | -0/+1 |
| | |||||
* | Fixes PR1106, buffer overflow in plugin table | Adam Domurad | 2012-08-07 | 1 | -1/+3 |
| | |||||
* | Added NEWS entry for PR1049 | Saad Mohammad | 2012-08-01 | 1 | -0/+2 |
| | |||||
* | CVE-2012-3422, RH840592: Potential read from an uninitialized memory location | Deepak Bhole | 2012-07-24 | 1 | -0/+5 |
| | | | | Updated NEWS file with entry for CVE-2012-3423 | ||||
* | Introduced configure option --with-gtk=2|3|default to be able | Jiri Vanek | 2012-07-31 | 1 | -0/+1 |
| | | | | to compile against different version of GTK+ (2.x or 3.x). | ||||
* | Fix RH838417, Fix RH838559: Disambiguate signed applet security prompt from ↵ | Danesh Dadachanji | 2012-07-20 | 1 | -0/+2 |
| | | | | certificate warning. | ||||
* | Fixes PR1011 w/ reproducer, folders now allowed in archive tag. | Adam Domurad | 2012-06-28 | 1 | -0/+1 |
| | | | | | Previously folders in the archive tag were treated as jars. They are now correctly treated as resource folders. | ||||
* | Fixed PR855: AppletStub getDocumentBase() doesn't return full URL | Danesh Dadachanji | 2012-06-14 | 1 | -0/+1 |
| | |||||
* | Fixes PR722: Now ignores unsigned content in META-INF/ during signing process | Adam Domurad | 2012-06-12 | 1 | -0/+1 |
| | |||||
* | Added news entry about fixing PR518. | Adam Domurad | 2012-06-11 | 1 | -0/+1 |
| | |||||
* | PR861: Allow loading from non codebase hosts. Allow code to connect to ↵ | Deepak Bhole | 2012-06-05 | 1 | -0/+1 |
| | | | | hosting server | ||||
* | Fixed PR863: Error passing strings to applet methods in Chromium | Deepak Bhole | 2012-06-01 | 1 | -0/+1 |
| | |||||
* | Fixed behavior when encoded/characters needed encoding included in url (PR811) | Jiri Vanek | 2012-05-18 | 1 | -0/+1 |
| | |||||
* | PR918: java applet windows uses a low resulution black/white icon | Omair Majid | 2012-04-19 | 1 | -0/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2012-04-19 Omair Majid <[email protected]> * NEWS: Update with fix. * netx/net/sourceforge/jnlp/runtime/JNLPRuntime.java: Remove windowIcon. (initialize): Do not call loadWindowIcon. (getWindowIcon): Remove. (setWindowIcon): Remove. (loadWindowIcon): Remove. * netx/net/sourceforge/jnlp/runtime/JNLPSecurityManager.java (checkTopLevelWindow): Do not set the icon for all top level windows. Use the default java icon instead. * netx/net/sourceforge/jnlp/util/ImageResources.java: New file. Provides access to icons. * netx/net/sourceforge/jnlp/JNLPSplashScreen.java (JNLPSplashScreen), * netx/net/sourceforge/jnlp/cache/DefaultDownloadIndicator.java (getListener), * netx/net/sourceforge/jnlp/controlpanel/AdvancedProxySettingsDialog.java (AdvancedProxySettingsDialog), * netx/net/sourceforge/jnlp/controlpanel/CacheViewer.java (CacheViewer), * netx/net/sourceforge/jnlp/controlpanel/ControlPanel.java (ControlPanel), * netx/net/sourceforge/jnlp/security/SecurityDialog.java (SecurityDialog), * netx/net/sourceforge/jnlp/security/viewer/CertificateViewer.java (CertificateViewer), * netx/net/sourceforge/jnlp/util/BasicExceptionDialog.java (show), * plugin/icedteanp/java/sun/applet/JavaConsole.java (initialize): Explicitly load icons. * tests/netx/unit/net/sourceforge/jnlp/util/ImageResourcesTest.java: Test for ImageResources class. | ||||
* | PR898: signed applications with big jnlp-file doesn't start | Omair Majid | 2012-03-22 | 1 | -0/+2 |
| | | | | | | JNLPMatcher was using PipedInputStream and PipedOutputStream without threads which was deadlocking on large files. Use ByteArrayOutputStream instead to avoid this. | ||||
* | PR895: IcedTea-Web searches for missing classes on each loadClass or findClass | Deepak Bhole | 2012-03-14 | 1 | -0/+1 |
| | |||||
* | PR820: IcedTea-Web 1.1.3 crashing Firefox when loading Citrix XenApp | Deepak Bhole | 2012-02-27 | 1 | -0/+4 |
| | | | | Patch from Thomas Meyer (primary) and Deepak Bhole | ||||
* | PR852: Classloader not being flushed after last applet from a site is closed | Deepak Bhole | 2012-01-27 | 1 | -0/+1 |
| | |||||
* | PR838: IcedTea plugin crashes with chrome browser when javascript is executedicedtea-web-1.2-branchpoint | Deepak Bhole | 2012-01-09 | 1 | -0/+1 |
| | |||||
* | RH586194: Unable to connect to connect with Juniper VPN client | Deepak Bhole | 2011-12-21 | 1 | -0/+1 |
| | | | | | | | | Patch from Thomas Meyer <[email protected]> * plugin/icedteanp/IcedTeaPluginRequestProcessor.cc(sendMember): Use createJavaObjectFromVariant to create the resulting object on Java side, rather than always creating a JSObject. | ||||
* | merge | Deepak Bhole | 2011-11-08 | 1 | -0/+1 |
|\ | |||||
| * | RH742515, CVE-2011-3377: IcedTea-Web: second-level domain subdomains and ↵ | Deepak Bhole | 2011-10-28 | 1 | -0/+1 |
| | | | | | | | | suffix domain SOP bypass | ||||
* | | PR808: javaws is unable to start when missing jars are enumerated before ↵ | Omair Majid | 2011-10-31 | 1 | -0/+1 |
|/ | | | | | | | | | | main jar 2011-10-31 Omair Majid <[email protected]> * NEWS: Update. * netx/net/sourceforge/jnlp/tools/JarSigner.java (verifyJars): Continue with other jars if the first jar can't be used. |