Bug#884481: libbatik-java: Squiggle will not open files: access denied

[Martin Collins]

Package: libbatik-java
Version: 1.9-3
Severity: grave
Justification: renders package unusable

Dear Maintainer,

Squiggle (svgbrowser) no longer opens svg files so is rendered useless.

$ squiggle spiro-swirls-smiley_Clipart_svg_File.svg 
java.security.AccessControlException: access denied ("java.net.NetPermission" "setDefaultAuthenticator")
        at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
        at java.security.AccessController.checkPermission(AccessController.java:884)
        at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
        at java.net.Authenticator.setDefault(Authenticator.java:127)
        at org.apache.batik.apps.svgbrowser.Main.<init>(Main.java:411)
        at org.apache.batik.apps.svgbrowser.Main.main(Main.java:165)

The GUI shows this (roughly, I had to OCR it):

java.Security.AccessControlException: access denied ("java.io.FilePermission" "Spiro-Swirls-Smiley_Clipart_svg_File.svg" "read")
        at java.Security.AccessControlConteM.checkPermiSSionIIAccessControlConteMJava:{U2}
        at java.Security.AccessController.checkPermiSSioniAccessControllerJava:EH34)
        at java.Iang.SecurityManager.checkPermiSSi0niSecurityManagerJava:549)
        at java.Iang.SecurityManager.checkReadiSecurityManagerJava:EIEIEIII
        at java.i0.File.isDirectoryIIFile.java:844)
        at sun.netwww.protocol.file.FileURLConnection.connect(FileURLConnection.java:82)
        at sun.netwww.protocol.file.FileURLConnection.getlnputStreamliFileURLConnection.java:18E!)
        at org.apache.batik.util.ParsedURLData.openStreamInternalliParsedURLData.java:554)
        at org.apache.batik.util.ParsedURLData.openStreamiParsedURLDataJava:4N3)
        at org.apache.batik.util.ParsedURL.openStreamiParsedURLJava:441II
        at org.apache.batik.anim.dom.SAXSVGDocumentFactory.createDocumentIISAXSVGDocumentFactory.java:l59)
        at org.apache.batik.anim.dom.SAXSVGDocumentFactory.createSVGDocument(SAXSVGDocumentFactory.java:124)
        at org.apache.batik.bridge.DocumentLoader.IoadDocumentiDocumentLoaderJava:106)
        at org.apache.batik.swingsvg.SVGDocumentLoader.runliSVGDocumentLoader.java:84)


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libbatik-java depends on:
ii  java-wrappers                 0.2
ii  libjaxp1.3-java               1.3.05-2
ii  libxalan2-java                2.7.2-1
ii  libxml-commons-external-java  1.4.01-2
ii  libxmlgraphics-commons-java   2.2-1

Versions of packages libbatik-java recommends:
ii  default-jre  2:1.8-59

Versions of packages libbatik-java suggests:
pn  jython         <none>
ii  librhino-java  1.7.7.1-1

-- no debconf information