id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
16204	Sandbox mode	Don-vip	team	"Thanks to our best friends at Oracle (joke: see #16047, [https://lists.openstreetmap.org/pipermail/josm-dev/2018-March/007997.html this]) and Red Hat (for real, see [https://lists.openstreetmap.org/pipermail/josm-dev/2018-April/008023.html here]), I'm playing with IcedTea-Web on Windows.

It works perfectly with full permissions, but IcedTea-Web allows users to launch a WebStart application in ""sandbox"" mode (a lot of things are denied) or in custom mode (user can choose what is allowed by the security manager, and what is not).

Currently JOSM crashes during startup in sandbox mode:

{{{
The 'Permissions' attribute of this application is 'all-permissions'. You have chosen the Sandbox run option, which overrides the Permissions manifest attribute, or the applet has already been automatically sandboxed.
java.lang.ExceptionInInitializerError
        at org.openstreetmap.josm.tools.ListenerList.create(ListenerList.java:242)
        at org.openstreetmap.josm.data.Preferences.<init>(Preferences.java:112)
        at org.openstreetmap.josm.Main.<clinit>(Main.java:83)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at net.sourceforge.jnlp.Launcher.launchApplication(Launcher.java:571)
        at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:940)
Caused by: java.security.AccessControlException: access denied (""java.util.logging.LoggingPermission"" ""control"")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
        at java.security.AccessController.checkPermission(AccessController.java:884)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at net.sourceforge.jnlp.runtime.JNLPSecurityManager.checkPermission(JNLPSecurityManager.java:291)
        at java.util.logging.LogManager.checkPermission(LogManager.java:1586)
        at java.util.logging.Handler.checkPermission(Handler.java:310)
        at java.util.logging.Handler.setLevel(Handler.java:265)
        at org.openstreetmap.josm.tools.Logging$RememberWarningHandler.<init>(Logging.java:407)
        at org.openstreetmap.josm.tools.Logging.<clinit>(Logging.java:51)
        ... 9 more

Exception in thread ""JOSM (development version)"" java.lang.RuntimeException: java.lang.ExceptionInInitializerError
        at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:963)
Caused by: java.lang.ExceptionInInitializerError
        at org.openstreetmap.josm.tools.ListenerList.create(ListenerList.java:242)
        at org.openstreetmap.josm.data.Preferences.<init>(Preferences.java:112)
        at org.openstreetmap.josm.Main.<clinit>(Main.java:83)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:498)
        at net.sourceforge.jnlp.Launcher.launchApplication(Launcher.java:571)
        at net.sourceforge.jnlp.Launcher$TgThread.run(Launcher.java:940)
Caused by: java.security.AccessControlException: access denied (""java.util.logging.LoggingPermission"" ""control"")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
        at java.security.AccessController.checkPermission(AccessController.java:884)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at net.sourceforge.jnlp.runtime.JNLPSecurityManager.checkPermission(JNLPSecurityManager.java:291)
        at java.util.logging.LogManager.checkPermission(LogManager.java:1586)
        at java.util.logging.Handler.checkPermission(Handler.java:310)
        at java.util.logging.Handler.setLevel(Handler.java:265)
        at org.openstreetmap.josm.tools.Logging$RememberWarningHandler.<init>(Logging.java:407)
        at org.openstreetmap.josm.tools.Logging.<clinit>(Logging.java:51)
        ... 9 more
}}}

So I'm curious to see what we can actually do in this mode by adding some robustness."	enhancement	closed	normal	18.04	Core Webstart		fixed	icedtea web security