Java小程序涉及磁盘读取的应用程序安全警告
我有一个java小程序,当用户访问网页时,它会下载到用户的浏览器,并允许他们将可恢复的文件上传到我的服务器。显然,这需要小程序访问用户的硬盘,据我所知,这超出了小程序可以运行的常规沙箱范围。用户会看到一个安全警告弹出窗口,要求他们允许该小程序运行。
我已经使用 verisign 对小程序进行了签名,并且获取小程序的链接是通过 SSL 和经过验证的证书进行的。这些都不能消除警告。
有没有办法让所有警告消失?谁能解释一下幕后发生了什么?
I have a java applet that is downloaded to a user's browser when they visit a webpage and allows them resumable file uploads to my server. Obviously, this requires the applet to access the user's hard disk, which I understand is outside the regular sandbox applets can run in. The user sees a security warning popup which asks for their permission to allow this applet to run.
I have signed the applet using verisign and the link from where is applet is fetched is over SSL with a versigned cert. None of these make the warning go away.
Is there a way to make all warnings go away? Can anyone explain what is going on behind the scenes?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
JNLP 有一个 FileOpenService,它允许不受信任的 Java Webstart 应用程序向用户显示“文件打开”对话框并访问用户选择的文件:
http://docs.oracle.com/javase/1.5.0/docs/guide/javaws/jnlp/javax/jnlp/FileOpenService .html
JNLP has a FileOpenService which allows the untrusted Java Webstart applications to show a File Open dialog to the user and access the file the user selected:
http://docs.oracle.com/javase/1.5.0/docs/guide/javaws/jnlp/javax/jnlp/FileOpenService.html
您无法避免此消息,如果可以的话,这将是一个安全问题。
您可以做的是进行配置(策略文件)以允许该小程序使用某些文件。但您必须手动执行此操作(出于明显的安全原因)。检查下面的链接。
资源:
You can't avoid this message, it would be a security issue if you could.
What you can do is having a configuration (a policy file) to allow this applet to use some files. But you would have to do this manually (for obvious security reasons). Check the link below.
Resources :