It can execute any command on my Windows platform. It's said Applet running in sandbox, why there aren't some restricts on executing platform commands. Or I need to do some configuration to my IE?
Thanks.
To be or not to be. It's a question.
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35223
7
posted
0
Runtime.exec is prohibited by default. Unless the applet is signed, or the local security policy altered, it can't be used in an applet. [ July 18, 2007: Message edited by: Ulf Dittmer ]
Then the applet I'm working on must be signed. But I don't see any warning message like starting WebStart. If I accept the signature, then I can run the application. So the user maybe confused when my applet invokes an OS command. Because he just thinks applet can't do this.
What I expect is maybe I still need to use Runtime.exec do something. But I don't want to let the user be frightened.
Ulf Dittmer
Marshal
Joined: Mar 22, 2005
Posts: 35223
7
posted
0
Well, the thinking is that the user understands that if he accepts the certificate, then the applet is allowed to do (just about) anything it pleases. So he shouldn't accept a certificate from someone he doesn't trust not to format his hard drive, or email his personal files to random people.
0
