[
https://issues.apache.org/jira/browse/PDFBOX-1946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13930669#comment-13930669
]
Tilman Hausherr commented on PDFBOX-1946:
-----------------------------------------
Re unit tests:
Not easy... see
[here|https://stackoverflow.com/questions/2138817/how-to-unit-test-java-code-that-is-expected-to-run-within-an-applet-security-man],
one would have to write and select a security manager that restricts like an
applet, and check 1. that the default values are used, 2. that there are no
other exceptions (e.g. NPE), and 3. run all or most of the tests with the
applet security settings.
> Running within an Applet has many AccessControlException 's
> -----------------------------------------------------------
>
> Key: PDFBOX-1946
> URL: https://issues.apache.org/jira/browse/PDFBOX-1946
> Project: PDFBox
> Issue Type: Wish
> Affects Versions: 1.8.4
> Environment: Running within an Applet
> Reporter: Fred Andrews
> Labels: Security
> Fix For: 1.8.5, 2.0.0
>
> Attachments: patch.zip
>
>
> I've identified 6 modules that should be modified to avoid
> AccessControlException's while running within an Applet. My solution would
> be to catch each AccessControlException and then use a default or continue
> on. For most of these, that is probably the best solution, for a few
> especially PDFStreamEngine someone may have a better idea.
> The modules that have issues:
> pdfbox\pdfparser\BaseParser -- line 131 call to Boolean.getBoolean, line 170
> call to Integer.getInteger
> pdfbox\util\PDFTextStripper -- line 79 call to System.getProperty()
> pdfbox\util\ResourceLoader -- line 67 call to getSystemClassLoader()
> pdfbox\pdmodel\graphics\color\PDColorState -- line 50, call to Color.getColor
> pdfbox/encoding/Encoding -- line 78, call to System.getProperty
> pdfbox\util\PDFStreamEngine -- Line 351 & 364 check for font == null (will be
> null if had resource loading problems)
> Not sure what the best way is to proceed. Please advise.
> Thanks
--
This message was sent by Atlassian JIRA
(v6.2#6252)
