This content has been marked as final. Show 6 replies
It could be something to do with [Mixing Signed and Unsigned Code|http://java.sun.com/javase/6/docs/technotes/guides/jweb/mixed_code.html] or a bug related to that new feature.
I have the same problem. Moreover, Drag and Drop doesn't work between two applets even if they have the same codebase.
Thanks for the link, but my applet should not be affected by that because it is entirely unsigned and I get no warning dialog box. Maybe a side effect of that change, tho. I'll have to look deeper.
tomangioletti wrote:For changes the affect OpenJDK 6, more information can be found through the updates that goes into that. For instance:
Under JRE 1.6.0_19, my applet now gets an AccessControlException when trying to do a drag-and-drop operation between windows (running in the same applet). It worked OK under _18. Can anyone point me to some documentation on what changed here? I didn't see anything about it in the release notes.
"(CVE-2010-0091): Unsigned applet can retrieve the dragged information before drop action occurs (6887703)."
Obviously, an unsigned applet should allow a drag-and-drop within itself, even if system dnd is (partially) available. So there's probably something worth looking into here.
Tracked the problem down to something in Sun's java code, which is a dead end, since I don't have access. I'm guessing that applet access to the system clipboard has been restricted in update 19, as it probably should have been all along. However, it would be nice if the applet would use some clipboard local to its JVM instead, which should not be a security problem. Again, it's just a guess.
Sun/Oracle just released 1.6.0_20, but the drag and drop applet problem still exists.