ilar errors. Looks like
the main script namespace isn't getting transferred to the "child" scripts.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
>
ting a new engine for each element
callback:
Sendingcore\src\org\apache\pivot\beans\BXMLSerializer.java
Transmitting file data .done
Committing transaction...
Committed revision 1817960.
> Java 8 BXML scripting security issues in Apache Piv
before I went in and mucked around with it.
I'm thinking I may need to "roll back" some of my changes in the sense that I
need to carefully consider when new engines were created.
> Java 8 BXML scripting secu
Investigating that also....
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/jira/browse/PIVOT-965
> Project:
couldn't we add a warning (in console) when
registering a listener that's already registered (when adding from a JVM
scripting language) ?
Or maybe handle those cases by delegating to an optional function to call ...
What do you think ?
> Java 8 BXML scripting security issue
ell" or "wand" fields
Definitely a Nashorn issue – removing the second "stateChanged" callback fixes
the problem. So, somehow the two Javascript callbacks with the same name are
colliding with each other so that the second one gets invoked for either
checkbo
require Java
8). For now 2.0.x is usable under Java 7, so this doesn't have to be an issue
there.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
>
saction...
Committed revision 1794769.
Looks like "branches/2.0.x" hasn't gotten earlier changes either, so I'm not
going to merge this right away until I get things straightened out.
> Java 8
even so.
Also, have no idea if this will ameliorate any of the security issues that are
the (actual) problems mentioned in this issue ....
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
>
a to "trunk" also:
Sending.
Sendingcore/src/org/apache/pivot/beans/BXMLSerializer.java
Transmitting file data .
Committed revision 1779224.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
licated with the current state of the
code, so I'm working on a much simpler solution for Java 8, coming soon.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
>
Serializer
public RhinoBXMLSerializer() {
super();
setDefaultLanguage("rhino");
}
}
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https
(for example http://localhost:8080) to
Exception Site List on Security tab in Java Control Panel. Then you can launch
the app and replicate the problem.
Regarding BXML scripting - we use BXML scripting just to delegate handling of
UI events (like button click) to controller's methods imple
run our JNLP file alright, although it doesn't have a great deal of
scripting in the BXML files, it does have some.
Anyway, I'm blocked right now from trying your test application because it is
self-signed Any thoughts on that?
Thanks,
~Roger
> Java 8 BXML scripting security
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Karel Hübl updated PIVOT-965:
-
Attachment: jnlpScripting.war
> Java 8 BXML scripting security issues in Apache Pivot R
ting/jnlpScripting.jnlp
javaws http://localhost:8080/jnlpScripting/pivotScripting.jnlp
Anyway thank you for the fix. I hope it will enable us to run our pivot apps on
JRE 1.8 with 1 more initial security dialog requesting confirmation of making
HTTP connection.
> Java 8 BXML scripting security is
rity issues:
Our application doesn't use *much* scripting in the BXML files, but we haven't
had any issues either, running as an applet using these security setti
ding.
Sendingcore\src\org\apache\pivot\beans\BXMLSerializer.java
Adding tests\src\org\apache\pivot\tests\issues\pivot965
Transmitting file data .
Committed revision 1728248.
> Java 8 BXML scripting security issues in Apache Piv
org\apache\pivot\tests\issues\pivot965\IncludedSection965.bxml
Adding
tests\src\org\apache\pivot\tests\issues\pivot965\Pivot965Main.java
Adding tests\src\org\apache\pivot\tests\issues\pivot965\Window965.bxml
Transmitting file data
Committed revision 1728247.
> Java 8 BXML scr
bust over
multiple includes, nested includes, or if "inline" is not set to true. This
will require further testing. For now, I will check in the code as mentioned
(which also contains some commented out debugging code as a reminder of how to
track these thing
x27;m working on trying to resolve the other "include" problem with mapping
functions -- pretty tricky code that I'm not quite understanding yet.
Thanks,
~Roger
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
ave changes in manifest part of build.xml and
build.properties.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/jira/browse/PI
seeing those in my
application (we did see the mapping function problems, though).
I don't think I have a problem with adding the ability to change the scripting
engine, so I will integrate your patch. Do you have any other forked changes
we should consider?
> Java 8 BXML scriptin
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Karel Hübl updated PIVOT-965:
-
Attachment: BXMLSerializer.patch
> Java 8 BXML scripting security issues in Apache Pivot R
patch from our fork. May be in 2.0.5 it should be possible to
override default language on BXMLSerializer descendants. This can be done by
introducing defaultLanguage protected property (see the patch).
> Java 8 BXML scripting security issues in
tart & JNLP forum:
https://community.oracle.com/message/13395388
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.or
Arel
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/jira/browse/PIVOT-965
> Project: Pivot
>
x, I have merged it to branches/2.0.x:
Sending.
Sendingcore\src\org\apache\pivot\beans\BXMLSerializer.java
Transmitting file data .
Committed revision 1712190.
> Java 8 BXML scripting security issues in Apache Piv
175.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/jira/browse/PIVOT-965
> Project: Pivot
> Is
But I'm pretty sure there are others
in the code that need similar treatment now. But at least we know how to do it.
Sendingcore\src\org\apache\pivot\beans\BXMLSerializer.java
Transmitting file data .
Committed revision 1712175.
> Java 8 BXML scripting security issues in Apach
you are really working on it.
Tell me if I can help. Thanks.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/ji
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-965:
-
Assignee: Roger Whitcomb (was: Sandro Martini)
> Java 8 BXML scripting security issues in Apa
ript calls are generating the security
prompts. I was getting problems with Nashorn just doing calls on Pivot objects
within the same BXML file until I updated BXMLSerializer with some namespace
fixes, etc.
Karel, could you try with the last either 2.0.5 or "trunk" code and see if y
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14745069#comment-14745069
]
Sandro Martini commented on PIVOT-965:
--
Hi all, some update on this ?
> Java
ckage" function in Javascript within BXML
> files won't work under Java 8 Nashorn script engine
> --
>
> Key: PIVOT-974
>
and all seems to work as before even
there (all is ok), is if safe to mark this issue as resolved now or other work
is still needed ? Thanks a lot. Bye
> Use of "importClass" or "importPackage" function in Javascript within BXML
> files won't work
[
https://issues.apache.org/jira/browse/PIVOT-974?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-974:
-
Fix Version/s: 2.0.5
> Use of "importClass" or "importPackage" function in
all-permissions
Codebase: *
Caller-Allowable-Codebase: *
Application-Library-Allowable-Codebase: *
Trusted-Library: true
Main-Class: org.kh.jnlpScripting.Main
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
>
quot;:
Sending2.0.x
Sending2.0.x/core/src/org/apache/pivot/beans/BXMLSerializer.java
Transmitting file data .
Committed revision 1692012.
> Use of "importClass" or "importPackage" function in Javascript within BXML
> files won&#
0 PM:
---
Yes, it would be great !! Thank you very much.
was (Author: smartini):
Yec, it would be great !! Thank you very much.
> Use of "importClass" or "importPackage" function in Javascript within BXML
> files won't work
much.
> Use of "importClass" or "importPackage" function in Javascript within BXML
> files won't work under Java 8 Nashorn script engine
> ---
ther attributes into your manifest
mentioned here:
http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/security/manifest.html
Thanks.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
>
e it doesn't seem necessary, but it could be
that users will be running on Java 8 even if we build only with Java 6. So, it
does probably make sense.
I can do the merge later today.
Thanks.
> Use of "importClass" or "importPackage" function in Javascript within BXML
s in manifest:
Permissions: all-permissions
Codebase: *
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/ji
this fix even in 2.0.x ?
> Use of "importClass" or "importPackage" function in Javascript within BXML
> files won't work
quot;:
Sendingcore\src\org\apache\pivot\beans\BXMLSerializer.java
Transmitting file data .
Committed revision 1691618.
> Use of "importClass" or "importPackage" function in Javascript within BXML
> files won&#
ot;importClass" or "importPackage" function in Javascript within BXML
> files won't work under Java 8 Nashorn script engine
> --
>
>
Roger Whitcomb created PIVOT-974:
Summary: Use of "importClass" or "importPackage" function in
Javascript within BXML files won't work under Java 8 Nashorn script engine
Key: PIVOT-974
Java security guidelines. There are some
Nashorn-related changes that are necessary, but they probably won't address
this issue.
Karel, are you using signed .jar files in your RIA?
> Java 8 BXML scripting security issues in Apach
es:
https://github.com/mozilla/rhino/releases
Let's update.
was (Author: smartini):
Check if this is related to Java 8 specific things found by Roger in PIVOT-949.
> Java 8 BXML scripting security issues in
ific things found by Roger in PIVOT-949.
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> --
>
> Key: PIVOT-965
> URL: https://issues.apache.org/jira/browse/PIVOT-965
>
a 8 - than this should be the way to go... If not, other appropriate
> solution should be selected.
The only workaround I have found, is to to include Rhino script engine as part
of application. But I believe better solution can be found...
> Java 8 BXML scripting s
ctly" fix this issue?
maybe we could try to configure the desired behavior when the default is not
good (as in this case) ...
I'll keep you updated. Bye
> Java 8 BXML scripting security issues in Apache Pivot RIAs
> -
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-965:
-
Labels: java8 jdk8 (was: )
> Java 8 BXML scripting security issues in Apache Pivot R
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-965:
-
Fix Version/s: 2.0.5
2.1
> Java 8 BXML scripting security issues in Apa
[
https://issues.apache.org/jira/browse/PIVOT-965?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini reassigned PIVOT-965:
Assignee: Sandro Martini
> Java 8 BXML scripting security issues in Apache Pivot R
Karel Hübl created PIVOT-965:
Summary: Java 8 BXML scripting security issues in Apache Pivot RIAs
Key: PIVOT-965
URL: https://issues.apache.org/jira/browse/PIVOT-965
Project: Pivot
Issue Type
application is deployed as RIA using Java Web Start.
I found out, that the problem is connected with nashorn script engine which
replaced rhino script engine from previous java version. BXMLSerializer is
using ScriptEngine to evaluate scripts in BXML files. It seems, that all
calls initiated from BXML
. BXMLSerializer is
using ScriptEngine to evaluate scripts in BXML files. It seems, that all
calls initiated from BXML scripts, are considered untrusted in JRE 1.8 RIA
Environment - this means security dialogs and exceptions are thrown, when
trying execute privileged actions (network communication, reflection
ll try my best (for example the initial setup of the project, and enforce
some of our best practices on code at the beginning) ... anyway be free to do a
post in our mailing lists, so we can see what others think, and maybe gather
some other contribution.
Thanks for now.
> Create a XM
y to contribute if I can, say, if we keep Pivot as part of our
process.
regards,
> Create a XML Schema for BXML
>
>
> Key: PIVOT-936
> URL: https://issues.apache.org/jira/browse/PIVOT-936
> Project: Pivot
sing DTD (or even an XSD) for simplifying
BXML writing was close because BXMLSerializer uses Java reflection to inspect
Pivot Beans., so it's hard to generate a schema from all our beans and keep it
aligned with code. Of course a schema to check/validate bxml files would be
useful.
But i
Labrosse Aurélien created PIVOT-936:
---
Summary: Create a XML Schema for BXML
Key: PIVOT-936
URL: https://issues.apache.org/jira/browse/PIVOT-936
Project: Pivot
Issue Type: Improvement
Hi sorry just read your email ...
Note that there isn't a graphical editor for BXML files, sorry (if I
remember well someone should have written something for NetBeans time ago,
but at the moment I don't find more info on it).
But of course you can associate them to the same editor of
Hi,
you should subscribe to our mailing lists, or your post won't be visible to
others (only at Nabble) ...
Some info here:
http://pivot.apache.org/lists.html
Bye,
Sandro
--
View this message in context:
http://apache-pivot-developers.417237.n3.nabble.com/ide-suport-for-edit-bxml
I use IDEA or Ecplise,if has any plugin to support edit bxml file?
thanks!!!
[
https://issues.apache.org/jira/browse/PIVOT-894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-894:
-
Fix Version/s: (was: 2.0.3)
> Memory leak when using dataRenderer blocks in bxml fi
move this to 2.1 (for all changes
required), ok ?
> Memory leak when using dataRenderer blocks in bxml files
>
>
> Key: PIVOT-894
> URL: https://issues.apache.org/ji
;renderer" interface had some way of knowing
when it was done with the Image object, and so could take it out of the
listener lists, that would also help. But, I don't think there is any way of
knowing this either.
> Memory leak when using dataRendere
m is:
- When creating a for a button (for instance) in BXML, a new
instance is created every time you do this, as opposed to the default renderer,
which uses a singleton instance every time.
- Then, each renderer created has its own ImageView instance, and ImageViewSkin
- When the renderer
> Memory leak when using dataRenderer blocks in bxml files
>
>
> Key: PIVOT-894
> URL: https://issues.apache.org/jira/browse/PIVOT-894
> Project: Pivot
> Issue Type: Bug
>
some incompatible change (so in this
case it will be moved to 2.1).
> Memory leak when using dataRenderer blocks in bxml files
>
>
> Key: PIVOT-894
> URL: https://issues.apache.org/jira/b
[
https://issues.apache.org/jira/browse/PIVOT-894?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-894:
-
Fix Version/s: 2.1
> Memory leak when using dataRenderer blocks in bxml fi
ing dataRenderer blocks in bxml files
>
>
> Key: PIVOT-894
> URL: https://issues.apache.org/jira/browse/PIVOT-894
> Project: Pivot
> Issue Type: Bug
> Components: wtk
Sandro Martini created PIVOT-894:
Summary: Memory leak when using dataRenderer blocks in bxml files
Key: PIVOT-894
URL: https://issues.apache.org/jira/browse/PIVOT-894
Project: Pivot
Issue
Just committed, thanks a lot.
If you find others, please tell to us :-) .
Bye,
Sandro
Hi Georg,
I'll fix the small issue in the code (and in live samples in our web
site) asap, thanks for now.
Bye,
Sandro
Hey there,
I stumbled upon a very small and minor problem of a semicolon at the end
of a bxml line in the code example of bxml:include in the bxml primer at
http://pivot.apache.org/tutorials/bxml-primer.html
Would it be possible to remove the semicolon from the end of the
following code example
7 PM:
---
Resolved.
Some basic info even here:
http://apache-pivot-users.399431.n3.nabble.com/Error-Application-class-name-is-required-td3954507.html
was (Author: smartini):
Resolved.
> Improve instructions on how to use BXML in an appl
.
> Improve instructions on how to use BXML in an application
> -
>
> Key: PIVOT-840
> URL: https://issues.apache.org/jira/browse/PIVOT-840
> Project: Pivot
>
BXML Tutorials (even related pages in
the web site), and add the main method in both to simplify their execution as
Java Applications.
> Improve instructions on how to use BXML in an application
> -
>
>
)
(was: 2.0.1)
> Improve instructions on how to use BXML in an application
> -
>
> Key: PIVOT-840
> URL: https://issues.apache.org/jira/browse/PIVOT-840
> Project: Pivot
>
hen including scripts in bxml files
> --
>
> Key: PIVOT-773
> URL: https://issues.apache.org/jira/browse/PIVOT-773
> Project: Pivot
> Issue Type: New Feature
>
low setting of encoding when including scripts in bxml files
> --
>
> Key: PIVOT-773
> URL: https://issues.apache.org/jira/browse/PIVOT-773
> Project: Pivot
> Is
> Improve instructions on how to use BXML in an application
> -
>
> Key: PIVOT-840
> URL: https://issues.apache.org/jira/browse/PIVOT-840
> Project: Pivot
> Is
[
https://issues.apache.org/jira/browse/PIVOT-840?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13211122#comment-13211122
]
Roger Whitcomb commented on PIVOT-840:
--
And accessing BXML resources is quite
the sample applications provided with the platform do this.
> Improve instructions on how to use BXML in an application
> -
>
> Key: PIVOT-840
> URL: https://issues.apache.org/ji
: [jira] [Created] (PIVOT-840) No instructions on how to use BXML in an
application
This account is protected by Bluebottle. Please click on the
following link to have your address added to the recipient's allowed
list and to ensure delivery of your email.
http://www.bluebottle.com/verific
[
https://issues.apache.org/jira/browse/PIVOT-840?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini updated PIVOT-840:
-
Component/s: tutorials
Description:
All demos and documentation emphasize the use of BXML
sage was received at Fri, 17 Feb 2012 19:10:12 +:
Subject: [jira] [Created] (PIVOT-840) No instructions on how to use BXML in an
application
This account is protected by Bluebottle. Please click on the
following link to have your address added to the recipient's allowed
list and
No instructions on how to use BXML in an application
Key: PIVOT-840
URL: https://issues.apache.org/jira/browse/PIVOT-840
Project: Pivot
Issue Type: Bug
Components: demos
[
https://issues.apache.org/jira/browse/PIVOT-823?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini resolved PIVOT-823.
--
Resolution: Fixed
> Add BXML Explorer, to see a live graphical preview of BXML fi
Add BXML Explorer, to see a live graphical preview of BXML files
Key: PIVOT-823
URL: https://issues.apache.org/jira/browse/PIVOT-823
Project: Pivot
Issue Type: Improvement
is is
fixed.
Please re-open with additional test cases if there is still a problem.
> BXML annotation should work for JavaBean properties
> ---
>
> Key: PIVOT-813
> URL: https://issues.ap
different, please give me more info.
Tell me something.
Thank you.
> BXML annotation should work for JavaBean properties
> ---
>
> Key: PIVOT-813
> URL: https://issues.apache.
Hi Noel,
I'm sorry but there is no screenshot in attach ... can you retry with
it inside a zip (could have been stripped out by mailing list ...) ?
But in any case, commit it :-) , under tutorials, or demos, chose what
you prefer.
Bye
Hi
I've built a BXML preview tool. See attached screenshot.
Any objections to me checking this under the tutorials folder?
Regards, Noel Grandin
and custom_panel.bxml, under tests, to start
looking at this ... probably I'll need even a launch file to run them with
appletviewer and see in a sandboxed environment what happens.
> BXML annotation should work for JavaBea
[
https://issues.apache.org/jira/browse/PIVOT-813?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandro Martini reassigned PIVOT-813:
Assignee: Sandro Martini
> BXML annotation should work for JavaBean propert
der tests) a test application, with a
simple test (like that described by Piotr, usign the @BXML annotation), taking
as a sample SuggestionPopupTest .
If someone has news in the meantime ...
> BXML annotation should work for JavaBea
1 - 100 of 136 matches
Mail list logo
