Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / April 2006

Tip: Looking for answers? Try searching our database.

Weird about signed applets ...

Thread view: 
PMA - 24 Apr 2006 14:39 GMT
Hi there,

I have a very weird behavior of a signed applet :

1) I have made an applet that accesses the local file systems
2) I put all that code into a specific method  (say blah())
3) I have designed a very poor ;-) interface using AWT to test it, the
interface just calling the blah() method
4) I have signed that stuff
5) I have tested it :  everything is OK !

6) I changed my HTML page such as the method blah() is called directly
thru' Javascript then I got the marvellous :
   access denied (java.io.FilePermission D:\XXXXXX\YYYYYY.ZZZ read)

I am using JDK 1.5_05

Any clue will help ... I really do not want to design an AWT or SWING
interface to that stuff, my applet is purelly a technical stuff ...

Thanx by advance
Philippe
Jeroen V. - 25 Apr 2006 14:49 GMT
This is for security reasons: the origin of the JavaScript can't be
verified. So allowing applet methods to be called from within Javascript
can be abused by malicious javascript.

If a user confirms the safeness of a signed applet by accepting its
certificate, the user only indicates his trust in the developer of the
applet, not in anything that may use the applet (except for himself,
when interacting with the applet via its GUI).

Jeroen


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.