Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Anybody know what this problem is on Facebook?

0 views
Skip to first unread message

Tom P

unread,
Oct 28, 2009, 6:18:26 PM10/28/09
to
I suspect it's a security problem, and it seems to be cross platform,
judging by a quick Google.


load: class
com.facebook.facebookphotouploader5.FacebookPhotoUploader5.class not found.
java.lang.ClassNotFoundException:
com.facebook.facebookphotouploader5.FacebookPhotoUploader5.class
at sun.applet.AppletClassLoader.findClass(AppletClassLoader.java:210)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.applet.AppletClassLoader.loadClass(AppletClassLoader.java:143)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at sun.applet.AppletClassLoader.loadCode(AppletClassLoader.java:690)
at sun.applet.AppletPanel.createApplet(AppletPanel.java:785)
at sun.plugin.AppletViewer.createApplet(AppletViewer.java:2315)
at sun.applet.AppletPanel.runLoader(AppletPanel.java:714)
at sun.applet.AppletPanel.run(AppletPanel.java:368)
at java.lang.Thread.run(Thread.java:619)

Tom P

unread,
Oct 29, 2009, 4:54:17 AM10/29/09
to


I thought this might be the answer, but it isn't:
http://noscript.net/faq#jar
<quote>
Q: Why does NoScript block documents loaded from jar: URLs?
A: As part of its anti-XSS protection, since version 1.1.7.8 NoScript
prevents JAR resources from being loaded as documents: loading documents
from within JAR files brings a serious XSS risk on every site allowing
JAR files to be uploaded by users or, very common, allowing open
redirects, e.g. Google. See Beford's proof of concept exploiting Google,
the original GNUCITIZEN disclosure and bug 369814 for further references.
You can control JAR blocking from the NoScript Options|Advanced|JAR
panel. Notice that this feature doesn't depend on your whitelist, i.e.
it works on every site, no matter if you allowed it to run JavaScript or
not.
</quote>


0 new messages