Browse Source

Revert "Treat *.jnlp as an executable class file, like *.jar"

Rationale: This was a Mozilla oversight and/or error.
This change has caused harm and is causing users to switch back to
Chrome, Safari or Edge for their WebStart needs.

JNLP is not an executable and should not be treated as such. JNLP should
be treated the same as any (e.g. Word) document and allowed to be opened
with the designated program.
A JNLP file will not cause execution on a system unless it has a valid
signature, and the user explicitly authorizes the launching based on
information provided by the signature. Moreover, there will even be a
check by the Java environment to see if the Java runtime (if there is
one) is current, and prompt the user to update if required.

This reverts commit 21495c58976e3cbbfe54d2e54d1fd67e36dff2a6 and
modifies ApplicationReputation.cpp to keep the list in sync (was a
discrepancy before).
pull/7/head
wolfbeast 3 years ago committed by Roy Tam
parent
commit
512a3ba8e8
  1. 2
      toolkit/components/downloads/ApplicationReputation.cpp
  2. 1
      xpcom/io/nsLocalFileWin.cpp

2
toolkit/components/downloads/ApplicationReputation.cpp

@ -467,7 +467,7 @@ static const char16_t* kBinaryFileExtensions[] = {
u".isp", // IIS config
//u".isu", // InstallShield
u".jar", // Java
u".jnlp", // Java
//u".jnlp", // Java
//u".job", // Windows
u".js", // JavaScript script
u".jse", // JScript

1
xpcom/io/nsLocalFileWin.cpp

@ -3037,7 +3037,6 @@ nsLocalFile::IsExecutable(bool* aResult)
"ins",
"isp",
"jar", // java application bundle
"jnlp", // java web start
"js",
"jse",
"lnk",

Loading…
Cancel
Save