APC AP9212 Guia do Utilizador descarregar pdf (Página 51)

6.3.2 Security

By default, all Web Start applications are run in a restricted sandbox with the following limitations

(sourced from [ 49 ] ):

• No access to local disk.

• All jars must be downloaded from the same host. Note, however, that you can download

extensions and JREs from any host as long as they are signed and trusted.

• Network connections are allowed only to host from which your jars were downloaded.

("Phone home restriction.")

• No security manager can be installed.

• No native libraries (not even in extensions).

• Limited access to system properties. (The application has read/write access to all system

properties defined in the .jnlp file, as well as read-only access to the same set of

properties as applets

The APT Client application, like many other standalone Java applications, requires unrestricted

network access. This can be achieved by using the <all-permissions/> tag in the jnlp

configuration file. When this security option is used, all jar files must be signed with a certificate. If

the certificate is not trusted the user will be prompted with the dialog below warning them of the

possible risks involved in running the application.

Figure 6-2 Web Start warning dialog

A trusted certificate is one which can be verified as a trusted source. Trusted certificates are

commercially available from companies such as Verisign

and Thawte

Many developers within the community have been requesting support for fine grained

permissions in jnlp files

iii

. This would allow the above warning to be more specific, rather than

simply requesting unrestricted access.

http://www.verisign.com

http://www.thawte.com

iii

http://developer.java.sun.com/developer/bugParade/bugs/4398087.html

1 2 ... 46 47 48 49 50 51 52 53 54 55 56 ... 146 147

Sem comentários

APC AP9212 Guia do Utilizador Página 51