Closed Bug 226843 Opened 21 years ago Closed 20 years ago

there's no way to disallow plug-ins to terminate the browser

Categories

(Core Graveyard :: Plug-ins, defect)

x86
Windows XP
defect
Not set
minor

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 156493

People

(Reporter: u20230201, Assigned: security-bugs)

Details

User-Agent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.2.1) Gecko/20021204 Build Identifier: Mozilla 1.4.1 I have an application that runs a Java plugin (and maybe JavaScript too). The application requests some user name and passord. If I press the cancel button of the applet, the browser terminates (even if I had multiple tabs open). I'd like to disallow applets shutting down my browser. Just in case: the application is HP CommandView SDM v1.07 (SAN management software, Applet ArrayDevMgr) Reproducible: Always Steps to Reproduce: (Assuming someone has the software) 1.Open the detail view to a disk array; a password dialog appears 2.Press "cancel" Actual Results: The browser window closes Expected Results: The browser window should not close.
> If I press the cancel button of the applet, the browser terminates Terminates? Or crashes? In any case, Java is not a script.
Summary: there's no way to disallow scripts to terminate the browser → there's no way to disallow plug-ins to terminate the browser
I guess the browser does not crash (because when a program running under Windows/XP crashes, there's a popup telling you that the application crashed). Si I guess the browser terminated. Yes, Java applets are different from scripts, but as long as you don't disassemble the Java code you can hardly tell what caused the browser to terminate.
Java applets can't shut down the JVM per se, since Java's sandbox security prevents it. However, if there's a fault in the JVM and it decides to terminate the process, there's nothing that Mozilla can do. What happens in other browsers?
Component: Security: General → Plug-ins
MS-IE 6.0.2800.1106 also shuts down in the same way. I'm not seeking MS-compatibility however. Java Plug-in is Sun's 1.4.2-b28 BTW...
*** This bug has been marked as a duplicate of 156493 ***
Status: UNCONFIRMED → RESOLVED
Closed: 20 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.