嵌入在 HTML 中的 Java 小程序在发送电子邮件时会挂起浏览器答案

【问题标题】：Java applet embedded in HTML hangs the browser when sends email嵌入在 HTML 中的 Java 小程序在发送电子邮件时会挂起浏览器
【发布时间】：2011-12-04 11:09:47
【问题描述】：

我正在尝试制作一个网站，当有人打开它时会向我发送电子邮件。它存储在本地，所以我不能使用php。我决定使用 Java 小程序，经过大量工作（Firefox 与小程序有一些严重问题），它几乎可以工作。 Applet 已完全加载、初始化、启动并响应 html 按钮。

我正在使用 Javamail 1.4.4，发生的情况是 Firefox 和 Opera（两种浏览器的反应方式相同）挂起，大约 20 秒后它们再次正常工作，但没有发送邮件。这是堆栈跟踪：

DEBUG: setDebug: JavaMail version 1.4.4
DEBUG: getProvider() returning javax.mail.Provider[TRANSPORT,smtps,com.sun.mail.smtp.SMTPSSLTransport,Sun Microsystems, Inc]
DEBUG SMTP: useEhlo true, useAuth true
DEBUG SMTP: trying to connect to host "smtp.gmail.com", port 465, isSSL true
network: Cache entry not found [url: http://smtp.gmail.com/crossdomain.xml, version: null]
network: Connecting http://smtp.gmail.com/crossdomain.xml with proxy=DIRECT
network: Connecting http://smtp.gmail.com:80/ with proxy=DIRECT
java.security.PrivilegedActionException: java.net.ConnectException: Connection timed out: connect
    at java.security.AccessController.doPrivileged(Native Method)
    at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
    at com.sun.deploy.net.CrossDomainXML.check(Unknown Source)
    at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
    at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
    at java.net.InetAddress.getAllByName0(Unknown Source)
    at java.net.InetAddress.getAllByName(Unknown Source)
    at java.net.InetAddress.getAllByName(Unknown Source)
    at java.net.InetAddress.getByName(Unknown Source)
    at java.net.InetSocketAddress.<init>(Unknown Source)
    at com.sun.mail.util.SocketFetcher.createSocket(SocketFetcher.java:288)
    at com.sun.mail.util.SocketFetcher.getSocket(SocketFetcher.java:231)
    at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:1900)
    at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:638)
    at javax.mail.Service.connect(Service.java:295)
    at mai.Mai$1.run(Mai.java:66)
    at mai.Mai$1.run(Mai.java:42)
    at java.security.AccessController.doPrivileged(Native Method)
    at mai.Mai.send(Mai.java:42)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at sun.plugin.javascript.JSInvoke.invoke(Unknown Source)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass$MethodInfo.invoke(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass$MemberBundle.invoke(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass.invoke0(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass.invoke(Unknown Source)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$DefaultInvocationDelegate.invoke(Unknown Source)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$3.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo.doObjectOp(Unknown Source)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$LiveConnectWorker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
Caused by: java.net.ConnectException: Connection timed out: connect
    at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method)
    at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)
    at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
    at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
    at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
    at java.net.PlainSocketImpl.connect(Unknown Source)
    at java.net.SocksSocketImpl.connect(Unknown Source)
    at java.net.Socket.connect(Unknown Source)
    at sun.net.NetworkClient.doConnect(Unknown Source)
    at sun.net.www.http.HttpClient.openServer(Unknown Source)
    at sun.net.www.http.HttpClient.openServer(Unknown Source)
    at sun.net.www.http.HttpClient.<init>(Unknown Source)
    at sun.net.www.http.HttpClient.New(Unknown Source)
    at sun.net.www.http.HttpClient.New(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
    at com.sun.deploy.net.CrossDomainXML$2.run(Unknown Source)
    ... 39 more
java.security.AccessControlException: access denied ("java.net.SocketPermission" "smtp.gmail.com" "resolve")
    at java.security.AccessControlContext.checkPermission(Unknown Source)
    at java.security.AccessController.checkPermission(Unknown Source)
    at java.lang.SecurityManager.checkPermission(Unknown Source)
    at java.lang.SecurityManager.checkConnect(Unknown Source)
    at sun.plugin2.applet.SecurityManagerHelper.checkConnectHelper(Unknown Source)
    at sun.plugin2.applet.AWTAppletSecurityManager.checkConnect(Unknown Source)
    at java.net.InetAddress.getAllByName0(Unknown Source)
    at java.net.InetAddress.getAllByName(Unknown Source)
    at java.net.InetAddress.getAllByName(Unknown Source)
    at java.net.InetAddress.getByName(Unknown Source)
    at java.net.InetSocketAddress.<init>(Unknown Source)
    at com.sun.mail.util.SocketFetcher.createSocket(SocketFetcher.java:288)
    at com.sun.mail.util.SocketFetcher.getSocket(SocketFetcher.java:231)
    at com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:1900)
    at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:638)
    at javax.mail.Service.connect(Service.java:295)
    at mai.Mai$1.run(Mai.java:66)
    at mai.Mai$1.run(Mai.java:42)
    at java.security.AccessController.doPrivileged(Native Method)
    at mai.Mai.send(Mai.java:42)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at sun.plugin.javascript.JSInvoke.invoke(Unknown Source)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at sun.plugin.javascript.JSClassLoader.invoke(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass$MethodInfo.invoke(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass$MemberBundle.invoke(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass.invoke0(Unknown Source)
    at sun.plugin2.liveconnect.JavaClass.invoke(Unknown Source)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$DefaultInvocationDelegate.invoke(Unknown Source)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$3.run(Unknown Source)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo.doObjectOp(Unknown Source)
    at sun.plugin2.main.client.LiveConnectSupport$PerAppletInfo$LiveConnectWorker.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)

这是我的小程序的代码（我在某处读到我应该使用 doPrivileged() 但它似乎对堆栈跟踪没有影响）：

package mai;

import java.applet.Applet;
import java.security.AccessController;
import java.security.PrivilegedAction;
import java.util.Properties;
import javax.mail.Message;
import javax.mail.Session;
import javax.mail.Transport;
import javax.mail.internet.InternetAddress;
import javax.mail.internet.MimeMessage;



public class Mai extends Applet{

    private static final String SMTP_HOST_NAME = "smtp.gmail.com";
    private static final int SMTP_HOST_PORT = 465;
    private static final String SMTP_AUTH_USER = "myMail@gmail.com";
    private static final String SMTP_AUTH_PWD = "myPassword";

    @Override
    public void init(){
        System.out.println("init");
    }

    public void send(){
        System.out.println("send");

        AccessController.doPrivileged(new PrivilegedAction<String>() {

                @Override
                public String run() {
                     try{

                        Properties props = new Properties();

                        props.put("mail.transport.protocol", "smtps");
                        props.put("mail.smtps.host", SMTP_HOST_NAME);
                        props.put("mail.smtps.auth", "true");
                        // props.put("mail.smtps.quitwait", "false");

                        Session mailSession = Session.getDefaultInstance(props);
                        mailSession.setDebug(true);
                        Transport transport = mailSession.getTransport();

                        MimeMessage message = new MimeMessage(mailSession);
                        message.setSubject("Testing SMTP-SSL");
                        message.setContent("This is a test", "text/plain");

                        message.addRecipient(Message.RecipientType.TO,
                             new InternetAddress("myMaill@gmail.com"));

                        transport.connect
                          (SMTP_HOST_NAME, SMTP_HOST_PORT, SMTP_AUTH_USER, SMTP_AUTH_PWD);

                        transport.sendMessage(message,
                            message.getRecipients(Message.RecipientType.TO));
                        transport.close();
                    }catch(Exception e){

                        e.printStackTrace();
                    }finally{
                         return "send";
                     }
                }
            });


    }
}

我还读到我可以签署我的小程序，但每次加载我的小程序时都会调用一个弹出窗口，这不是一个选项，因为它必须隐藏一点。

任何想法我做错了什么？

(如果您认为在这里使用小程序太复杂，请告诉我一个更好的方法。据我所知，JavaScript 无法发送电子邮件，我没有服务器，所以我无法使用 php 或类似的东西node.js 和所有其他发送信息的库都需要用户登录）。

【问题讨论】：

一个发送电子邮件但“必须隐藏一点”的小程序？听起来很邪恶。如果你实现了它，请告诉我们如何实现，这样我们就可以使用 Oracle 提出一个安全漏洞并修复它。 TIA
这个网站是一个礼物。它将有一个视频，应该带回回忆。在和会有我要求这个人为我开门。但是为了让我知道什么时候来以及这个人什么时候真正在看它，我需要电子邮件。如果这是邪恶的，那么我很抱歉。

标签： java javascript applet jakarta-mail

【解决方案1】：

欢迎加入恶意代码编写者俱乐部（恶意包括跟踪）。您正在违反浏览器 w.r.t 的同源策略。新的网络连接，这意味着您无需签名即可连接的唯一位置是为原始页面提供服务的主机。

【讨论】：