Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / Security / February 2004

Tip: Looking for answers? Try searching our database.

Java 2 Applet How to leave Sandbox

Thread view: 
Stefan Werner - 28 Jan 2004 11:05 GMT
I'm trying to run a applet in Netscape 7 (Uses Java 1.4.1).

The applet is for reading a file from the local users harddisk.

I know there is the possibility to change the policy file of the user, but
that I don't want to do.

I also tried to cretificate the applet whith a self generated certificate
and I accept the certificate in the browser but I get all the time these
security exception. "access denied (java.io.FilePermission)"

Can anybody help

thanks

Stefan
Ben_ - 28 Jan 2004 12:49 GMT
> I know there is the possibility to change the policy file of the user, but
> that I don't want to do.
AFAIK, grating permissions is required. It can be done by modifying the
local .policy file or by pointing to a remote file in the .security file
(policy.url property).
BarryNL - 29 Jan 2004 11:47 GMT
>>I know there is the possibility to change the policy file of the user, but
>>that I don't want to do.
>
> AFAIK, grating permissions is required. It can be done by modifying the
> local .policy file or by pointing to a remote file in the .security file
> (policy.url property).

Agreed, I believe that accepting the certificate only says 'I believe
this certificate really does belong to this person'. The user still has
to grant code signed by that person permission to read the filesystem in
their .policy file.
unixisbetter - 12 Feb 2004 21:49 GMT
If you are willing to go to the trouble (and pay for it), you could get a Java codesigning certificate from Thawte or Verisign and sign your applet. This would eliminate the sandbox limitations altogether.


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.