As indicated in the bug report, WebView needs to call to 
`CookieManager::getDefault` within a `doPrivileged` block so that it will work 
when a security manager is enabled. There are two calls in 
`com.sun.webkit.network.CookieJar` that are not wrapped in a `doPrivileged`.

I added a manual test (since it requires loading a page over http/https which 
we can't do in our automated tests) based on the test program that was attached 
to JBS.

-------------

Commit messages:
 - 8277457: AccessControlException: access denied ("java.net.NetPermission" 
"getCookieHandler")

Changes: https://git.openjdk.java.net/jfx/pull/681/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jfx&pr=681&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8277457
  Stats: 101 lines in 2 files changed: 99 ins; 0 del; 2 mod
  Patch: https://git.openjdk.java.net/jfx/pull/681.diff
  Fetch: git fetch https://git.openjdk.java.net/jfx pull/681/head:pull/681

PR: https://git.openjdk.java.net/jfx/pull/681

Reply via email to