Closed Bug 226843 Opened 21 years ago Closed 19 years ago

there's no way to disallow plug-ins to terminate the browser

Categories

(Core Graveyard :: Plug-ins, defect)

x86
Windows XP
defect
Not set
minor

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 156493

People

(Reporter: u20230201, Assigned: security-bugs)

Details

User-Agent:       Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.2.1) Gecko/20021204
Build Identifier: Mozilla 1.4.1

I have an application that runs a Java plugin (and maybe JavaScript too). The
application requests some user name and passord. If I press the cancel button of
the applet, the browser terminates (even if I had multiple tabs open). I'd like
to disallow applets shutting down my browser. Just in case: the application is
HP CommandView SDM v1.07 (SAN management software, Applet ArrayDevMgr)

Reproducible: Always

Steps to Reproduce:
(Assuming someone has the software)
1.Open the detail view to a disk array; a password dialog appears
2.Press "cancel"

Actual Results:  
The browser window closes

Expected Results:  
The browser window should not close.
> If I press the cancel button of the applet, the browser terminates

Terminates?  Or crashes?

In any case, Java is not a script.
Summary: there's no way to disallow scripts to terminate the browser → there's no way to disallow plug-ins to terminate the browser
I guess the browser does not crash (because when a program running under
Windows/XP crashes, there's a popup telling you that the application crashed).
Si I guess the browser terminated. Yes, Java applets are different from scripts,
but as long as you don't disassemble the Java code you can hardly tell what
caused the browser to terminate.
Java applets can't shut down the JVM per se, since Java's sandbox security
prevents it. However, if there's a fault in the JVM and it decides to terminate
the process, there's nothing that Mozilla can do.  What happens in other browsers?
Component: Security: General → Plug-ins
MS-IE 6.0.2800.1106 also shuts down in the same way. I'm not seeking
MS-compatibility however. Java Plug-in is Sun's 1.4.2-b28 BTW...

*** This bug has been marked as a duplicate of 156493 ***
Status: UNCONFIRMED → RESOLVED
Closed: 19 years ago
Resolution: --- → DUPLICATE
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.