JRE 1.6.0_20-b02 security issue with Marvin Sketch

When Marvin Sketch is run on JRE version 1.6.0_20-b02 (Windows XP/Windows 7) the following dialog is displayed (also see attachment): Java has discovered application components that could indicate a security concern. The application contains both signed and unsigned code.

Can you please consistently sign all code to avoid this problem.

Try Marvin Sketch on the ChemAxon site to reproduce the issue:

http://www.chemaxon.com/marvin/sketch/index.php

All Marvin binaries are signed but Marvin loads certain properties files and molecule files that are out of jars. They are located outside of the jars to be able to edit by web developers to customize behaviour of the applet.

It is a generic issue in Java 1.6.0_19 and above versions that drop warning by downloading a textual file with Class.getResourceAsStream.

Please read the following topic where you can find more info and description of the workarounds.

Browser drops security warning by loading Marvin applets

In Marvin 5.3.3, we have solved this issue by wrapping untrusted contents into trusted signed jars.

So Java does not drop warning any more by startup of Marvin applets.