521675 - Unable to disable Java on 1.9.2

Status: RESOLVED DUPLICATE of bug 513979

(Core Graveyard :: Plug-ins, defect)

Description

[Bob Clary [:bc] (inactive)]

1. about:config and set security.enable_java false
2. visit http://mainline.brynmawr.edu/Courses/cs110/spring2002/Applets/Smiley/Smiley.html
3. Click Sad.

Applet still works in 1.9.2, but not 1.9.1. 

Considering its potential as a vector for security exploits, I don't think we should ship without the ability to disable Java.

Comment 1

[Jo Hermans]

That preference is not used anymore, you now have to disable the plugin directly.

see bug  and bug 513979

Comment 2

[Jo Hermans]

that's bug 506985 and bug 513979

Comment 3

[Steven Michaud [:smichaud] (Retired)]

> you now have to disable the plugin directly

Go to Tools : Add-ons : Plugins and disable the "Java Embedding Plugin".

This should probably be documented somewhere.

Comment 4

[Bob Clary [:bc] (inactive)]

bug 513979 Comment #4 doesn't appear to be true however. But if this is invalid, then please make it so.

Is there no way to create a profile with Java disabled?

Comment 5

[Steven Michaud [:smichaud] (Retired)]

> bug 513979 Comment #4 doesn't appear to be true however.

Looks like this is more complex than I first thought.  I'll look into it further on Monday.

Comment 6

[Bob Clary [:bc] (inactive)]

Just to confirm, I created a new profile in 1.9.1 and disabled java, then loaded 1.9.2 with the same profile. 1.9.2 showed that java was enabled on first start with that profile.

Comment 7

[Henrik Skupin [:whimboo][⌚️UTC+1]]

Yeah. Bug 513979 should be reopened. We do not use the correct enabled state of the Java plugin between versions on 1.9.1 and 1.9.2. Disabling Java on 1.9.2 works fine when using the plug-ins panel in the Add-ons Manager. But we don't port the users settings correctly from 1.9.1.

Comment 8

[Daniel Veditz [:dveditz]]

So bug 513979 is reopened (and a blocker)... call this one INVALID or DUPE?

Comment 9

[Steven Michaud [:smichaud] (Retired)]

I think it should be called a dup.