The workaround is what the bug report suggests: sign the applet. You could also write your own encoder/decoder for Font and Color, which shouldn't be too hard. They seem to be in no hurry to fix this problem, which has apparently been known since 2002.
There's an article on how to grant applets permissions as part of the FAQ. With signed applets, you'll always get the dialog asking for permission to execute it at least once; there's no way around that.
I'm doing laundry! Look how clean this tiny ad is: