Applet Sandbox Rules

[Hal Vaughan]

I've tried Googling but I've found conflicting answers and the clearest I've
gotten is that the rules for the sandbox an applet runs in varies according
to each browser.

I've read, for example, that applets don't have access to files on the local
file system, but I've used applets that let me upload files to a website.

Where can I find out what the rules about applet sandboxes are? For
example, if I could have an applet load and save files locally and send
them to a local printer, then I could write a program that I've given to
some people as an applet and it would make updating it much easier.

Yes, I realize an applet reading and writing files and using the printer is
a security risk, but if it's already allowable, then I could use it. Is
there a good, reliable site with information on this?

Thanks!

Hal

 

[bencoe]

I've tried Googling but I've found conflicting answers and the clearest I've
gotten is that the rules for the sandbox an applet runs in varies according
to each browser.

I've read, for example, that applets don't have access to files on the local
file system, but I've used applets that let me upload files to a website.

Where can I find out what the rules about applet sandboxes are? For
example, if I could have an applet load and save files locally and send
them to a local printer, then I could write a program that I've given to
some people as an applet and it would make updating it much easier.

Yes, I realize an applet reading and writing files and using the printer is
a security risk, but if it's already allowable, then I could use it. Is
there a good, reliable site with information on this?

Thanks!

Hal

You can make an Applet do pretty much anything if you sign it. Look
into applet signing, I know sun has a few tutorials... It's a real
pain in the ass mind you.

 

[Andrew Thompson]

I've tried Googling but I've found conflicting answers and the clearest I've
gotten is that the rules for the sandbox an applet runs in varies according
to each browser.

For the most part that is false, but there ar some quirks,
especially when it comes to the OS component supplied
by MS (AKA IE).

Why are you running an applet, rather than a web start
application?

If 'predictable sandbox behaviour' is tantamount to this
applet, a JWS launch would be the best way to go.

Yes, I realize an applet reading and writing files and using the printer is
a security risk, but if it's already allowable, then I could use it.

The web start API provides printing and file access for
sandboxed applets and applications.

 

[Roedy Green]

Where can I find out what the rules about applet sandboxes are?

see http://mindprod.com/jgloss/applet.html
and http://mindprod.com/jgloss/policyfile.html

 

[Roedy Green]

You can make an Applet do pretty much anything if you sign it.

see http://mindprod.com/jgloss/signedapplets.html
http://mindprod.com/jgloss/certificate.html