661484 - EFT applet broken if JavaScript-based content policies are present (Adblock Plus, NoScript, GreaseMonkey...)

Status: RESOLVED WONTFIX

(Core Graveyard :: Plug-ins, defect)

Description

[Wladimir Palant]

Attachment: Minimal content policy for testing

This has been reported as an Adblock Plus bug but my tests confirm that every content policy is affected (including the minimal extension I am attaching). The "Enhanced File Transfer" applet will work correctly if no content policy is present, with a content policy it will hang with the message "Checking connection to server" however.

The Java Console output doesn't really help understanding the issue:

[INFO] MApplet - GlobalScape EFT Applet 1.4.1/JFileUpload 2.8 Build BETA.001
[INFO] MApplet - CustomSM enabled
[INFO] EFTApplet - ==================================
[INFO] EFTApplet -  EFTApplet: Build Aug 6 2009 : Compiled using jdk1.6.0_14 [for EFT6.1 view]
[INFO] EFTApplet - ==================================
[INFO] EFTApplet - Http concurrent transfers = 5
[INFO] EFTHTTPTransfer - AHC HTTP
[INFO] HTTPTransfer - WeakSSL registered for HTTPS
[INFO] HttpClientFactory - Http simultaneous connections = 100
[INFO] HTTPTransfer - HTTP in/out buffer size = 65535
[INFO] HTTPTransfer - Auto-detect proxy settings (ps): DIRECT
[INFO] HTTPTransfer - Final results for Auto-detect proxy settings : host = null
[INFO] HTTPTransfer - Final results for Auto-detect proxy settings : port = -1
[INFO] HTTPTransfer - HTTP credentials set

This is where it ends for the "broken" case. In the "working" case the output is continued:

[INFO] EFTHTTPTransfer - AHC HTTP
[INFO] HTTPTransfer - WeakSSL registered for HTTPS
[INFO] HttpClientFactory - Http simultaneous connections = 100
[INFO] HTTPTransfer - HTTP in/out buffer size = 65535
[INFO] HTTPTransfer - Auto-detect proxy settings (ps): DIRECT
[INFO] HTTPTransfer - Final results for Auto-detect proxy settings : host = null
[INFO] HTTPTransfer - Final results for Auto-detect proxy settings : port = -1
[INFO] HTTPTransfer - HTTP credentials set
[INFO] EFTApplet - Requeue count = 10

And the message when navigating away from the page is the same in both scenarios:

[ERROR] QueueManager - java.lang.InterruptedException: sleep interrupted

Unfortunately, looking for yourself requires login credential. I got some from the bug reporter and can mail them to anybody wanting to look into this. The applet archives are (downloading them requires logging in as well):

https://tech.globalscape.com/EFTClient/wtc/lib/jclientupload.jar
https://tech.globalscape.com/EFTClient/wtc/lib/httpimpl.jar
https://tech.globalscape.com/EFTClient/wtc/lib/chttpclient.jar
https://tech.globalscape.com/EFTClient/wtc/lib/clogging.jar
https://tech.globalscape.com/EFTClient/wtc/lib/eft.jar
https://tech.globalscape.com/EFTClient/wtc/lib/weakssl.jar

Entry point is globalscape.eft.jclient.EFTApplet.class in eft.jar.

I tested on Windows 7 x64 with a 20110530 mozilla-central nightly. Same problem exists in Firefox 4.0.1 and Firefox 3.6. In Firefox 3.5 the applet loads correctly however.

Comment 1

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WONTFIX per bug #1269807.

For more information see - https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/