616106 - Some Java applets are broken with content policies (Adblock Plus, NoScript, GreaseMonkey...)

Status: RESOLVED WONTFIX

(Core Graveyard :: Plug-ins, defect)

Description

[Wladimir Palant]

Attachment: Minimal content policy for testing

I was getting some reports about Java applets being broken by Adblock Plus, most of them refer to Pogo.com games. Now I got a website reported where the issue is easier to reproduce: https://www.industrienspension.dk/selvbetjeningmedlem/logon.aspx. When you go to this page and change selection to "Log på med NemID" the NemID applet should appear. This doesn't happen if a JavaScript-based content policy is present (Adblock Plus, NoScript or the minimal content policy extension attached to this bug), all you get then is a gray line.

This issue seems restricted to the Window platform, I couldn't reproduce it on Linux. I reproduced it on Windows 7 x64 but other people apparently observed it on Vista as well. It only affects 1.9.2 branch - it happens in Firefox 3.6.12 but Firefox 4 is fine. Java SE 6 u22 is used (though u14 is also affected according to the report I received).

Note that this is similar to bug 594482 - but apparently not the same issue.

Comment 1

[Wladimir Palant]

applet.offsetWidth is 0 and applet.offsetHeight is 13 - even though computed style shows that this applet should occupy 200x250 pixels (which matches width and height attributes).

The gray line isn't actually part of the applet, it belongs to the page layout. The applet itself is invisible.

Comment 2

[Giorgio Maone [:ma1]]

Not sure whether it's interesting or not, but if you've got "NoScript Options|Embeddings|Apply these restrictions to whitelisted sites as well" checked, or just load the page without whitelisting it, and activate the blocked applet by clicking its placeholder, it gets properly loaded and sized even though it goes through the same content policy call.
So maybe the problem is tied also to the time when the applet is requested, i.e. page-loading time vs page already loaded.

Comment 3

[S. Malling]

Same issus at https://www.nemadgang.dk/nemid/login.aspx where the applet should be left of the image with the smiley.
But i'm having the issue on a mac running camino with no content-plug-ins installed and only since the recent camino 2.1 update (gecko 1.9.2.24), so this looks very much like a regression to me.
Wladimir, are you sure your linux version of mozilla/firefox is a up to date, as your windows version of it is?

Comment 4

[Wladimir Palant]

I was testing with current Firefox versions of course. But this bug report is already a year old.

Comment 5

[Shekhar]

I can confirm the bug, on opensuse 12.1, firefox 8.0, this page crashes firefox if adblockplus is enabled. It works fine if i uninstall adblock plus.

http://www.java.com/en/download/help/testvm.xml

Comment 6

[Shekhar]

Oh and just want to add that it does the same with greasemonkey also. If I disable them (instead of restarting) and then also it works.

Comment 7

[Shekhar]

It is still there with firefox 9.0 on opensuse 12.1.

Comment 8

[Virtual_ManPL [:Virtual] 🇵🇱 - (please needinfo? me - so I will see your comment/reply/question/etc.)]

I'm marking this bug as WONTFIX per bug #1269807.

For more information see - https://blog.mozilla.org/futurereleases/2015/10/08/npapi-plugins-in-firefox/