在小程序中运行桌面应用程序是否更安全?
首先,当我说“在小程序中运行桌面应用程序”时,我的意思是制作一个离线运行的小程序应用程序,而不是在 JFrame 中运行的桌面应用程序。
我对小程序的了解很少(也许我说的有误,请纠正我),小程序拥有默认情况下未授予的所有权限。此外,小程序在沙箱内运行,未经明确许可,不允许信息输入或输出。
因此,如果我关注应用程序的安全性,最好在小程序中运行它(对于桌面应用程序来说是离线的),然后在 JFrame 中运行。对吗?
Fist of all, when I say "run a desktop app within a applet" I mean do a Applet application that runs off-line, instead of a Desktop application that runs inside a JFrame.
The little I know about applets (and maybe something I say is wrong, please correct me) is that applets have all permitions not granted by default. Also, the applets run inside a Sandbox, that does not allow information in or out without explicity permition.
So, if I am focused on security in my application, its best to run it inside an applet (off-line, for a desktop application) then inside a JFrame. Is it right?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
这同样适用于使用 Java Web Start 部署的桌面应用程序。除此之外,它们的开发更加有趣,并且没有小程序的所有令人讨厌的可用性限制
文章 Java Web Start 和安全性“描述了通过 Java Web Start 部署的应用程序的安全性基础知识。”更多详细信息,请参阅文章 使用 JNLP 和 Java Web Start 部署软件。
The same applies to desktop applications deployed with Java Web Start. Except for that their development is a lot more fun and does not have all the nasty usability constraints of applets
The article Java Web Start and Security "describes the basics of security for applications deployed through Java Web Start." More details may be found in the article Deploying Software with JNLP and Java Web Start.
说某些权限是默认授予的并不完全正确;相反,小程序有不同的SecurityContext。
但如果您不想摆弄它,请按照 Konrad 的建议将其作为 Java Web Start 应用程序运行。
It's not quite correct to say that certain permissions are note granted by default; it's rather that applets have got a different SecurityContext.
But if you do not want to fiddle with that, go with Konrad's suggestion to run it as a Java Web Start Application.