On 9/13/13 1:13 PM, Paul B. Gallagher wrote:
> David E. Ross wrote:
> 
>> Windows XP SP3
>> SeaMonkey 2.20
>> Java 7 u40 (7.0.400.43)
>>
>> Certain Web sites that I have visited for quite a few years use Java.
>> Now, whenever I visit any those sites for the first time after a fresh
>> launching of SeaMonkey, I get a dialogue popup that says:
>>> Do you want to run this application?
>>> An unsigned application from the location below is requesting to run.
>>> etc, etc, etc
>>> [checkbox] I accept this risk and want to run this app.
>>
>> If I decline, I can get the following Java Console log:
>>> Java Plug-in 10.40.2.43
>>> Using JRE version 1.7.0_40-b43 Java HotSpot(TM) Client VM
>>> User home directory = C:\Documents and Settings\User
>>> ----------------------------------------------------
>>> ...
> 
> To understand what's going on:
> 
> CTRL-SHIFT-A or Tools | Add-ons Manager
> On the Plugins tab, you'll see:
> 
> (!) Java Deployment Toolkit 7.0.400.43 is known to be vulnerable. Use 
> with caution. More information...
> 
> The button at right offers the options Ask to Activate/Never Activate. 
> If you don't want to be asked, choose the second option and it will 
> never run and never ask.
> 
> The "More information" link takes you here:
> <https://addons.mozilla.org/en-US/seamonkey/blocked/p428>
> with links to additional explanations.
> 
> AFAIK you can't just whitelist an app on the blocklist; you can only 
> approve on a case-by-case basis. This is for your protection.
> 
> As for Java itself, you can choose "Always activate" and be done with it 
> because it's not on the blocklist.
> 

On the Plugins pane of the Add-ons Manager, Java is set for "Always
Activate"; and Java Deployment Toolkit is set for "Never Activate".
Visiting <http://davesfiles.com/HTML/hex_decimal_color_picker.htm>, I
still get the Security Warning dialogue popup.  The popup can be seen at
<http://www.rossde.com/test/SecurityWarning.jpg>.

-- 

David E. Ross
<http://www.rossde.com/>

On occasion, I filter and ignore all newsgroup messages
posted through GoogleGroups via Google's G2/1.0 user agent
because of spam from that source.
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to