> Problem is this doesn't make sense to me as the app has allpermission
> (or sets the security manager to null even). Why enforce this then? It
> sounds like a bug (and there are several at oracle by now). Lets see
> what they do

Indeed, this makes no sense. 

> I'll try to find a workaround on the weekend and if
> not, I'll probably add a property to disable extension bundles (which
> would make the url go away - only extension bundles will not work).

6u24 is out and I needed a workaround fast. Changing the extension url from 
http to file seems to satisfy the same origin policy. If my change doesn't 
cause other side-effects it might even be a permanent solution. (I have far to 
less experience with OSGi/Felix to really comment on this)

Regards,
Ingo

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@felix.apache.org
For additional commands, e-mail: users-h...@felix.apache.org

Reply via email to