javascript classpath

trpost

I am using javascript to call a hidden applet and am getting a
javascript error "java.lang.Exception: java.lang.NoClassDefFoundError:
org/apache/commons/httpclient/HttpClient" If I comment out the alert
statement then the applet loads fine, but when I make a javascript call

it looks like it needs to be aware of the classpath. I have all my .jar

files in the right place for the applet (C:\Program
Files\Java\jre1.5.0_06\classes) because if I move them out of the
directory then the applet fails with a NoClassDefFoundError. Any ideas
where javascript is looking for a classpath??
<html>
<head>
<title>Http status code demo</title>
</head>
<body>
<script type="text/javascript">
function getStatusCode(uri)
{
return document.applets['statusApplet'].getStatusCode(uri);
}
</script>

<applet name="statusApplet" CODEBASE
="http://localhost/php/client/applet/Tst/"
code="StatusCodeApplet.class" width="0" height="0"
archive="commons-httpclient-3.0.jar;commons-codec-1.3.jar;commons-logging..j**ar;commons-logging-api.jar"></applet>

<script type="text/javascript">
alert(getStatusCode("http://www.yahoo.com"));
</script>
</body>
</html>

May 10 '06 #1

Subscribe Post Reply

3657

tr****@gmail.com wrote:

I am using javascript to call a hidden applet and am getting a
javascript error "java.lang.Exception: java.lang.NoClassDefFoundError:
org/apache/commons/httpclient/HttpClient" If I comment out the alert
statement then the applet loads fine, but when I make a javascript call

it looks like it needs to be aware of the classpath. I have all my .jar

files in the right place for the applet (C:\Program
Files\Java\jre1.5.0_06\classes) because if I move them out of the
directory then the applet fails with a NoClassDefFoundError. Any ideas
where javascript is looking for a classpath??
<html>
<head>
<title>Http status code demo</title>
</head>
<body>
<script type="text/javascript">
function getStatusCode(uri)
{
return document.applets['statusApplet'].getStatusCode(uri);
}
</script>

<applet name="statusApplet" CODEBASE
="http://localhost/php/client/applet/Tst/"
code="StatusCodeApplet.class" width="0" height="0"
archive="commons-httpclient-3.0.jar;commons-codec-1.3.jar;commons-logging.j**ar;commons-logging-api.jar"></applet>

<script type="text/javascript">
alert(getStatusCode("http://www.yahoo.com"));
</script>
</body>
</html>

<applet> tag is deprecated in favor of <object> From the other side
<object> initialization is often disabled in IE6 because of a huge per
design security hole: thusly I don't dare to insist. But shouldn't be a
"mayscript" flag in your applet?
<applet .... mayscript>

May 11 '06 #2

Randy Webb

VK said the following on 5/11/2006 2:18 AM:

<snip>

<applet> tag is deprecated in favor of <object> From the other side
<object> initialization is often disabled in IE6 because of a huge per
design security hole: thusly I don't dare to insist.

"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE? And, what is
that hole?

--
Randy
comp.lang.javascript FAQ - http://jibbering.com/faq & newsgroup weekly
Javascript Best Practices - http://www.JavascriptToolbox.com/bestpractices/

May 11 '06 #3

Zif

Randy Webb wrote:

VK said the following on 5/11/2006 2:18 AM:

<snip>
<applet> tag is deprecated in favor of <object> From the other side
<object> initialization is often disabled in IE6 because of a huge per
design security hole: thusly I don't dare to insist.
"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE?

Who knows what is implied? VK's answers are often so cryptic it's
either impossible to decipher the meaning, or so many are possible that
it's a lottery as to which was intended.

And, what is that hole?

Please don't offer encouragement! Perhaps your intention is to coax
more howlers, but I think you'll find more satisfaction in a crossword
puzzle or game of scrabble.
--
Zif

May 11 '06 #4

Randy Webb

Zif said the following on 5/11/2006 4:59 AM:

Randy Webb wrote:
VK said the following on 5/11/2006 2:18 AM:

<snip>
<applet> tag is deprecated in favor of <object> From the other side
<object> initialization is often disabled in IE6 because of a huge per
design security hole: thusly I don't dare to insist.
"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE?

Who knows what is implied? VK's answers are often so cryptic it's
either impossible to decipher the meaning, or so many are possible that
it's a lottery as to which was intended.

Hence my request for clarification.

And, what is that hole?

Please don't offer encouragement! Perhaps your intention is to coax
more howlers, but I think you'll find more satisfaction in a crossword
puzzle or game of scrabble.

It was curiosity and nothing more.

--
Randy
comp.lang.javascript FAQ - http://jibbering.com/faq & newsgroup weekly
Javascript Best Practices - http://www.JavascriptToolbox.com/bestpractices/

May 11 '06 #5

trpost

I tried using mayscript in the applet tag, but that made no difference.

May 12 '06 #6

Randy Webb wrote:

Zif said the following on 5/11/2006 4:59 AM:
Randy Webb wrote:
VK said the following on 5/11/2006 2:18 AM:

<snip>

<applet> tag is deprecated in favor of <object> From the other side
<object> initialization is often disabled in IE6 because of a huge per
design security hole: thusly I don't dare to insist.

"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE?

Who knows what is implied? VK's answers are often so cryptic it's
either impossible to decipher the meaning, or so many are possible that
it's a lottery as to which was intended.

Hence my request for clarification.
And, what is that hole?

Please don't offer encouragement! Perhaps your intention is to coax
more howlers, but I think you'll find more satisfaction in a crossword
puzzle or game of scrabble.

It was curiosity and nothing more.

If you are curious about software security, it's OT to c.l.j. IMHO.
slashdot.org and astalavista.com would be a place to start.

P.S. If you read ieblogs on MSDN, you may read out the main reason of
IE7 having XMLHttpRequest instead of ActiveXObject is "the ability to
use AJAX technics even with object activation disabled". I hope you
didn't think that Microsoft does it just because W3C just made the
first working draft of xmlhttp and they are in rush to compile with it?
Of course you did not. :-)
The question you may ask yourselve why does Microsoft care of <object>
disabled customers. Is not it because there is too many of them? Yes it
is. And why so many of them?

To answer this question
1) get yourselve any Windows below XP SP2 with IE 5.x - 6.x installed.
Most probably you will have to reinstall it after, so backup well.
2) Install and activate any antivirus of your choice.
3) Go to Google and pretend to be a guy searching a crack for some
popular software: "X crack serial warez...."
4) Navigate to each page of search results one by one. Within 10-20
navigations max you will get a page-trap. A sign of it will be a
strangely long loading page with iframe-looking blank area in the
middle. It can be a a real virus or less harmful spyware or an adware -
that I cannot predict. I just predict that you'll get it - and that
your patented antivirus will be dead silent.

<http://secunia.com/advisories/16480>
If by some occasion you miss to find a "relevant" site, I can put a
harmless but working demo for you..

May 12 '06 #7

tr****@gmail.com wrote:

I tried using mayscript in the applet tag, but that made no difference.

Actually it is *highly* unlikely that "java.lang.NoClassDefFoundError"
could be caused by Java <-> JavaScript interaction. This is a
compilation error, not a runtime error. Either your class name doesn't
match the .class file name, or you have a wrong MANIFEST, or something
like that. Please remove any JavaScript stuff, prepare a test case and
ask at <comp.lang.java.help>

I have a feeling that the actual Java error is too simple to bother
<comp.lang.java.programming> right now, but keep it as an option if the
first group will not be helpful.

May 13 '06 #8

Randy Webb

VK said the following on 5/12/2006 5:59 PM:

Randy Webb wrote:
Zif said the following on 5/11/2006 4:59 AM:
Randy Webb wrote:
VK said the following on 5/11/2006 2:18 AM:

<snip>

> <applet> tag is deprecated in favor of <object> From the other side
> <object> initialization is often disabled in IE6 because of a huge per
> design security hole: thusly I don't dare to insist.
"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE?
Who knows what is implied? VK's answers are often so cryptic it's
either impossible to decipher the meaning, or so many are possible that
it's a lottery as to which was intended. Hence my request for clarification.
And, what is that hole?
Please don't offer encouragement! Perhaps your intention is to coax
more howlers, but I think you'll find more satisfaction in a crossword
puzzle or game of scrabble.

It was curiosity and nothing more.

If you are curious about software security, it's OT to c.l.j. IMHO.
slashdot.org and astalavista.com would be a place to start.

Software security is off topic to c.l.j when it deals directly with HTML
and JS? Your thought processes amuse me sometimes.
P.S. If you read ieblogs on MSDN, you may read out the main reason of
IE7 having XMLHttpRequest instead of ActiveXObject is "the ability to
use AJAX technics even with object activation disabled". I hope you
didn't think that Microsoft does it just because W3C just made the
first working draft of xmlhttp and they are in rush to compile with it?
Of course you did not. :-)
IE disabled the object activation as a result of EOLAS, it had nothing
to do with XMLHTTPRequest object. And I would fathom a guess that the
real reason they made XMLHTTPRequest a native Object in IE7 was the
ActiveX warning and nothing more. It works without ActiveX which can not
be said for IE6 and below.
The question you may ask yourselve why does Microsoft care of <object>
disabled customers. Is not it because there is too many of them? Yes it
is. And why so many of them?
MS disabled the EMBED tag recently, but only for ActiveX objects. The
reason was EOLAS but you won't find that anywhere on the MS site. The
page that explains the disabling also has a link to a page that explains
how to "defeat that security fix". So no, I don't trust a whole lot I
read on the MS site without testing it myself.
To answer this question
1) get yourselve any Windows below XP SP2 with IE 5.x - 6.x installed.

Why would I want an outdated antiquated non-patched IE? It has enough
holes in it patched.

<quote cite="VK THIS thread">
<object> initialization is often disabled in IE6 because of a huge per
design security hole: thusly I don't dare to insist.
</quote>

To which I replied:
<quote cite="Randy Webb THIS thread">
"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE?
</quote>

Which implies, to me anyway, that the security hole was by design. And I
asked you to back up that assumption. And to date, you have not done
anything remotely close to that other than to give me some scenario
about an outdated unpatched IE. I want to know what the security hole is
in IE6 XP SP2 that you are referring to, and nothing more.

--
Randy
comp.lang.javascript FAQ - http://jibbering.com/faq & newsgroup weekly
Javascript Best Practices - http://www.JavascriptToolbox.com/bestpractices/

May 14 '06 #9

Randy Webb wrote:

Software security is off topic to c.l.j when it deals directly with HTML
and JS? Your thought processes amuse me sometimes.
"deals directly with HTML and JS"? It deals with HTML as the initial
penetration point is marked by <object></object> tag. It has nothing to
do with JScript as it's not used for penetration and can be disabled
whatsoever. It is an exploration using binary coding. The topics even
if connected with HTML but not connected anyhow with JavaScript/JScript
are OT in c.l.j. IMHO

IE disabled the object activation as a result of EOLAS, it had nothing
to do with XMLHTTPRequest object.
As a result of EOLAS multimedia objects require initial user
interaction, but not disabled in the sense "not allowed to be
initialized". They are being initialized as before - if object
activation is not disabled all together in the current browser.
To which I replied:
<quote cite="Randy Webb THIS thread">
"because of a huge per design security hole"? You are implying that MS
intentionally - per design - put a security hole in IE?
</quote>

Which implies, to me anyway, that the security hole was by design. And I
asked you to back up that assumption. And to date, you have not done
anything remotely close to that other than to give me some scenario
about an outdated unpatched IE. I want to know what the security hole is
in IE6 XP SP2 that you are referring to, and nothing more.

I was repeatedly saying "if one has Windows **below** XP SP2". In SP2
the whole libraries were replaced to lock some known holes, so many
things work in an all new way. If you are willing to know about exploit
for XP SP2 or greater c.l.j. again is not a place to look for.

May 14 '06 #10

Similar topics

Question about classpath

by: Herman | last post by:

Hi everyone, I recently installed the Sun J2SE SDK on my machine, and I am having trouble running the java.exe interpreter for my Java compiled code. I remember that I had to set my environment...

Java

How to make CLASSPATH behave like PATH on Windows?

by: David Cook | last post by:

Windows (XP and NT) allows one to specify environmental variable (such as PATH and CLASSPATH) at both the SYSTEM-wide level as well as at the per-USER level. And the behavior has always been...

Java

java CLASSPATH Environement var

by: Abdelhalim MIMOUNI | last post by:

hi, i'm new to java, and using sun last JDK, and i'm trying to understand how work this feature when we want to compile at command line ? i'm trying to set the classpath to the directory of the...

Java

axis library not found?

by: Dave Keays | last post by:

I am setting-up an experimental web service using Apache Axis but I'm having problems. AXIS can't find a library that I've verified exists on my computer and that CLASSPATH points to it. I'm using...

Apache Web Server

C# classpath equivalent?

by: jeremiah johnson | last post by:

Okay this is going to sound really dumb. Skeet, you can poke fun of me in your own special way if you see fit. Is there a way to reproduce the CLASSPATH functionality of Java within C#? Would...

C# / C Sharp

javascript classpath

by: trpost | last post by:

I am using javascript to call a hidden applet and am getting a javascript error "java.lang.Exception: java.lang.NoClassDefFoundError: org/apache/commons/httpclient/HttpClient" If I comment out the...

Javascript

Help with -classpath and packages

by: dlarsson | last post by:

Okay folks, I thought I was doing something very, very simple, but I cannot seem to get this to work at all. Can anyone identify what I am doing wrong here-? _________________________________ ...

Java

CLASSPATH + Linux

by: KevinRobinson | last post by:

Hi, Can anyone please tell me how to add or change a Java classpath in SUSE Linux 9.3. I have set up a Tomcat server but my Java Classes will not run although they do on a windows box. ...

Java

Setting Classpath

by: Ganon11 | last post by:

Hey all, I'm setting up my computer to run Java for a class I'm taking, and I've gotten into a bit of a snag. I've set the CLASSPATH system variable to include the base folder of my homeworks...

Java

Javascript-Applet-Servlet Comunication

by: ManidipSengupta | last post by:

Hi, a few (3) questions for the Java experts, and let me know if this is the right forum. It deals with 100% java code (reason for posting here) but manages a Web browser with Javascript. Thanks in...

Javascript

Wordpress or something else?

by: Faith0G | last post by:

I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

Content Management Systems

One-click Importing Excel Data into a*Database

by: ryjfgjl | last post by:

In our work, we often need to import Excel data into databases (such as MySQL, SQL Server, Oracle) for data analysis and processing. Usually, we use database tools like Navicat or the Excel import...

Microsoft Excel

Easy Steps to Fix "Canon Printer Won't Connect to WiFi Network"

by: taylorcarr | last post by:

A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...

General

How to turn on java script in a villaon keypad mobile phone

by: Charles Arthur | last post by:

How do i turn on java script on a villaon, callus and itel keypad mobile phone

Java

Merging data from multiple Excel files

by: ryjfgjl | last post by:

In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...

Data Management

Migrating Website to Cloud - Emmanuel Katto

by: emmanuelkatto | last post by:

Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel

General

Navigating the Data Structures and Algorithms (DSA)

by: BarryA | last post by:

What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...

Algorithms / Advanced Math

Looking to do Android software development, any suggestions? Is flutter better?

by: nemocccc | last post by:

hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?

General

How to build RAID in BIOS?

by: Hystou | last post by:

There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

Computer Hardware