Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / June 2007

Tip: Looking for answers? Try searching our database.

Applet Sandbox Rules

Thread view: 
Hal Vaughan - 28 Jun 2007 22:02 GMT
I've tried Googling but I've found conflicting answers and the clearest I've
gotten is that the rules for the sandbox an applet runs in varies according
to each browser.

I've read, for example, that applets don't have access to files on the local
file system, but I've used applets that let me upload files to a website.

Where can I find out what the rules about applet sandboxes are?  For
example, if I could have an applet load and save files locally and send
them to a local printer, then I could write a program that I've given to
some people as an applet and it would make updating it much easier.

Yes, I realize an applet reading and writing files and using the printer is
a security risk, but if it's already allowable, then I could use it.  Is
there a good, reliable site with information on this?

Thanks!

Hal
bencoe@gmail.com - 28 Jun 2007 23:01 GMT
> I've tried Googling but I've found conflicting answers and the clearest I've
> gotten is that the rules for the sandbox an applet runs in varies according
[quoted text clipped - 15 lines]
>
> Hal

You can make an Applet do pretty much anything if you sign it. Look
into applet signing, I know sun has a few tutorials... It's a real
pain in the a.s mind you.

----
Ben.
http://www.plink-search.com
Roedy Green - 29 Jun 2007 03:48 GMT
>You can make an Applet do pretty much anything if you sign it.

see http://mindprod.com/jgloss/signedapplets.html
http://mindprod.com/jgloss/certificate.html
--
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Andrew Thompson - 29 Jun 2007 01:25 GMT
>I've tried Googling but I've found conflicting answers and the clearest I've
>gotten is that the rules for the sandbox an applet runs in varies according
>to each browser.

For the most part that is false, but there ar some quirks,
especially when it comes to the OS component supplied
by MS (AKA IE).

Why are you running an applet, rather than a web start
application?

If 'predictable sandbox behaviour' is tantamount to this
applet, a JWS launch would be the best way to go.

>Yes, I realize an applet reading and writing files and using the printer is
>a security risk, but if it's already allowable, then I could use it.  

The web start API provides printing and file access for
sandboxed applets and applications.

Signature

Andrew Thompson
http://www.athompson.info/andrew/

Roedy Green - 29 Jun 2007 03:47 GMT
On Thu, 28 Jun 2007 17:02:43 -0400, Hal Vaughan
<hal@thresholddigital.com> wrote, quoted or indirectly quoted someone
who said :

>Where can I find out what the rules about applet sandboxes are?

see http://mindprod.com/jgloss/applet.html
and http://mindprod.com/jgloss/policyfile.html
--
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.