95712 - Use of 'codebase' attribute with APPLET causes plugin finder to open wrong URL

Status: VERIFIED DUPLICATE of bug 91366

(Core Graveyard :: Plug-ins, defect, P1)

Description

[Arun Ranganathan]

I'm sending this to plugins for a first look.  Here are the preconditions for
this bug:

1. Have an install of Moz' (or, say, N6.1) which does NOT have Java Plugin (OJI
plugin) installed also.

Here's how to induce this bug to occur:
1. Suppose you access a page with an invocation to an applet using the applet
tag.  Suppose the Applet tag looked like this:

<APPLET CODE="WordWriter.class" WIDTH="250" HEIGHT= "250">
</APPLET>
2. Since you don't have the plugin, you'll see that immediately after clicking
on the broken jigsaw piece ('click here to obtain the plugin'), an HTML window
is opened that allows you to choose the version of the plugin you wish to
download.  This page comes from the Netscape plugin finder page.  A click
prompts the XPI download.  You'll have to restart your browser, but at least
you've obtained the desired Java Plugin.

3. NOW, here's the bug: suppose your invocation to the Applet looked like this

<APPLET CODE="WordWriter.class" CODEBASE="." WIDTH="250" HEIGHT= "250">
</APPLET> 
Note that all I've done is add the CODEBASE attribute.  Note also that I don't
have the JRE 1.3.x installed (no plugin).  Click on the "Plugin Not Found" box.
 Now, you'll get an additional dialog box asking you if you want to download the
plugin.  Clicking "Get the Plugin" causes a new window to be opened with this URL:
javascript:window.open("http://home.netscape.com/plugins/jvm.html?mimetype=application/x-java-vm","plugin","toolbar=no,status=no,resizeable=no,scrollbars=no,height=252,width=626");
This JavaScript is never evaluated, and therefore a window is never *really* opened.
Note that the URL portion of it, and the specs given to window.open, specify a
window that's exactly the same as the window that opens so smoothly *WITHOUT*
the CODEBASE attribute.
Expected Behavior: Adding the CODEBASE atrribute should cause a smooth download
if you don't have Sun's plugin.
Actual Behavior: The download never occurs unless a 'savvy' user (aren't we all
savvy?) edits the URL above and drops the "javascript:" portion.  This is bad.
Test cases to follow, but any applet will do.

Comment 1

[Arun Ranganathan]

Attachment: This is an HTML file that invokes an applet using codebase.

Comment 2

[Arun Ranganathan]

Attachment: This is a *.class file that serves as an Applet to test on.

Comment 3

[Arun Ranganathan]

Attachment: This file accompanies my Applet class file. It' a *.class

Comment 4

[Arun Ranganathan]

Attachment: Java File, if you want to compile your own applet.

Comment 5

[Arun Ranganathan]

Attachment: DataType.java -- goes with the Applet Java file.

Comment 6

[shrirang khanzode]

not sure but bug 91366 mentions a similar problem

Comment 7

[Peter Lubczynski]

Nice bug report, but I think this is a dup of bug 91366.



*** This bug has been marked as a duplicate of 91366 ***

Comment 8

[shrirang khanzode]

verif dup,