Can't launch my webstart app with IE7/Vista

My team develops a large intranet app that uses Webstart for deployment. Our latest release works great with 1.5.0_11, but one of our customers is trying to use IE 7 and Vista so we've started looking at the issues.

The first one is that on IE7 when I push a button on my link page which trys to open "PermissionUtility&app1.jnlp". In IE 7 and Vista it pops up the little thing at the top saying that it blocked the file download. You right click and tell it to download file and nothing happens. It downloads the jnlp (I know from my WebServer's logs), but then it never launches it.

I'm hoping my & isn't causing problems (i use it to know what to launch next). It works with IE7 on XP and with Firefox on Vista.

Any ideas?

[764 byte] By [dabatesa] at [2007-11-27 8:34:55]
# 1

> ...IE 7 and Vista ...

> ...trys to open

> "PermissionUtility&app1.jnlp".

...

> blocked the file download.

...

> 'm hoping my & isn't causing problems

Why hope, when you can test?

Obviously this will go better if the development team

can get direct access to an IE7/Vista combo. that

replicates the initial problem with the URL that

includes the '&'.

AndrewThompson64a at 2007-7-12 20:31:18 > top of Java-index,Desktop,Deploying...
# 2

We also have a large application deployed via WebStart both internally on our intranet and to external clients over the Internet. We also deploy a legacy version of the application as an applet which requires IE because of reliance on some legacy ASP code.

I encountered a problem when trying to run both the applet or the WebStart version on Vista/IE7 (though both will run fine on XP/IE7).

It transpires the the Java security model is fundamentally broken by IE7's "Protected Mode" (which only happens on Vista, not XP) . There is an open bug (6548078) in the Sun database which I have added my vote to, along with related bug 6504236.

There are 2 workarounds I found:

1. Disable Protected Mode in IE7 (double click on "Protected Mode: On" in the alert bar then uncheck the box in the security dialog that pops up)

2. (Riskier) Launch IE7 as administrator (right-click and click "Run as administrator"

Until Sun fixes the security model issues I don't know there's much else we can do.

damian_ryana at 2007-7-12 20:31:18 > top of Java-index,Desktop,Deploying...
# 3
Thank you. I will go vote for the bug as well.
dabatesa at 2007-7-12 20:31:18 > top of Java-index,Desktop,Deploying...
# 4

If you would consider unorthodox solution take a look at WebCream. It turns Swing and AWT applications into pure HTML/Javascript websites. WebCream generates cross-browser HTML and JavaScript at runtime for existing graphical Java applications without the need to modify the original code. No Java runtime environment is required on the client site and since your application runs as pure HTML inside the browser you don't depend on JRE and OS settings.

xplorema at 2007-7-12 20:31:18 > top of Java-index,Desktop,Deploying...
# 5
Our GUIs are too rich for this kind of a thing. We've looked at it though.
dabatesa at 2007-7-12 20:31:18 > top of Java-index,Desktop,Deploying...
# 6

...

> ...There is an open bug

> (6548078) in the Sun database

...

I note it applies only to trusted apps.,

how about this alternate strategy..

> There are 2 workarounds I found:

>

> 1. Disable Protected Mode in IE7 (double click on

> "Protected Mode: On" in the alert bar then uncheck

> the box in the security dialog that pops up)

> 2. (Riskier) Launch IE7 as administrator (right-click

> and click "Run as administrator"

...

Launch a sandboxed JWS app. using Java 6,

then call BascisService.showDocument()

on the actual application JNLP. A call to BS.sD

on a JNLP in Java 6 - should be handed directly

to javaws - and hopefully IE's security model

will not kick in.

Does it work? Try this example launcher..

http://www.physci.org/jws/jwsapp.jnlp

(the launcher is sandboxed) then select

either giffer.jnlp or giffer0512.jnlp (both

'all-permissions'), wait a moment

for the details to appear, then click 'Launch'.

AndrewThompson64a at 2007-7-12 20:31:18 > top of Java-index,Desktop,Deploying...