Hi.
I'm not familiar with any VML Plugins, so I can't say if that
would work. As I said, removing VML from RAP this is a rather
complicated task that should only be attempted by someone familiar
with the RAP _javascript_ Code. Otherwise I is very likely to break
something. And of course the application will look somewhat like a
Windows 95 application as a result.
To be frank, I think this whole approach (ripping out parts of IE)
is a bad. I know it's not your Idea, but I would still strongly
suggest to try to negotiate with those in charge to either install
the security fix, switch to another browser, or update the OS. A
second service release such as 1.5.2 is by based on months of
feedback on 1.5.0 and 1.5.1. When hacking RAP in that way is there
is a considerable risk that it will introduce a new bug in this
otherwise stable release - especially when done by a non-expert
and not tested by a whole developer community.
I'm sorry if that isn't what you hoped to hear. If you see no
other way than to modify RAP, at the very least let a _javascript_
expert do it.
Greetings,
Tim
Am 09.05.2014 12:42, schrieb frank.jakop@xxxxxxxxx:
Hi Tim,
yersterday we tried this one by
removing
all gradients, animations, rounded corners, but then the events
were no
longer propagated, so we could see some sort of button (very
ugly though)
but were not able to click them.
As we understood the code in [1]
when
the engine says that VML is supported, a renderClass of VML-type
would
always be instantiated which in our opinion leads to _javascript_
errors
that kill something in the application. But we're no _javascript_
experts
(that's why we use RAP).
Would it be possible in your
opinion,
when we use IE 8 without enabled vgx.dll but with installed
VMLViewer-Plugin?
Maybe the service provider of our customers could implement
this, assuming
there's no known security issue.
Greetings,
Frank
Hi.
It should be possible to modify any RAP version to work without
VML, assuming
the "classic" theme is used (as it doesn't use gradients/rounded
borders) and no Canvas widgets are used.
The ProgressBar widget is also problematic, but could be
modified to work
without VML.
However, these changes aren't trivial and I can not give you
some easy-to-follow
tutorial to implement them. I would have to do it myself and
probably need
at least few days for that.
Greetings,
Tim
Am 09.05.2014 08:24, schrieb frank.jakop@xxxxxxxxx:
Hello,
we are using RAP 1.5.2 for about 7 applications among 400
customers. Most
of them still stick to Windows XP and therefore to IE 8
(because our customers
are mostly bank institutes who depend on external IT service
provider).
Recently a security vulnerability in the Microsoft VML-Library
came up
which was fixed by an out-of-band patch (http://support.microsoft.com/kb/2964358
relating to https://technet.microsoft.com/de-de/library/security/ms14-021).
Instead of using this patch the service provider of our
customers suggested
disabling the VML-capabilities of IE by unregistering the dll
"%CommonProgramFiles%\Microsoft
Shared\VGX\vgx.dll". This makes every RAP-application
non-functional
on IE < 9, because it tries to initialize an
org.eclipse.rwt.VML in
org.eclipse.rwt.GraphicsUtil, if the engine reports to support
VML [1].
As far as we can see, IE up to version 8 reports as engine
name "mshtml",
which in org.eclipse.rwt.Client leads to returning true in
function supportsVml.
[2]
So the question is: Is it possible to get around this with
a) not having the customers upgrade to IE >= 9
b) not having the customers use a different browser
c) not having the customers to re-enable the vgx.dll
?
Best regards
Frank Jakop
Teamleiter
________________________
arxes-tolina GmbH
Salzufer 8, 10587 Berlin
http://www.arxes-tolina.de
[1]
statics : {
_renderClass : null,
init : function()
{
if(
this._renderClass
== null
) {
if(
org.eclipse.rwt.Client.supportsVml() ) {
this._renderClass
= org.eclipse.rwt.VML;
} else
if
( org.eclipse.rwt.Client.supportsSvg() ) {
this._renderClass
= org.eclipse.rwt.SVG;
}
if(
this._renderClass
!= null
) {
this._renderClass.init();
}
}
},
[2]
supportsVml : function() {
return ( this.getEngine() === "mshtml" )
&& ( this.getVersion() >= 5.5 );
},
_______________________________________________
rap-dev mailing list
rap-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/rap-dev
--
Innoopract Informationssysteme GmbH
tbuschto@xxxxxxxxxxxxxxxxx
Tel: +49 721 - 66 47 33 - 0
Fax: +49 721 - 66 47 33 29_______________________________________________
rap-dev mailing list
rap-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/rap-dev
_______________________________________________
rap-dev mailing list
rap-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/rap-dev
--
Innoopract Informationssysteme GmbH
tbuschto@xxxxxxxxxxxxxxxxx
Tel: +49 721 - 66 47 33 - 0
Fax: +49 721 - 66 47 33 29
|
