Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.java.gui > #2538 > unrolled thread

Webstart windows warning

Started by"lemmi" <lemmi@THRWHITE.remove-dii-this>
First post2011-04-27 15:39 +0000
Last post2011-04-27 15:39 +0000
Articles 7 — 4 participants

Back to article view | Back to comp.lang.java.gui


Contents

  Webstart windows warning "lemmi" <lemmi@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000
    Re: Webstart windows warn "bcd" <bcd@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000
      Re: Webstart windows warn "Andrew Thompson" <andrew.thompson@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000
        Re: Webstart windows warn "bcd" <bcd@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000
          Re: Webstart windows warn "Andrew Thompson" <andrew.thompson@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000
            Re: Webstart windows warn "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000
    Re: Webstart windows warn "Roedy Green" <roedy.green@THRWHITE.remove-dii-this> - 2011-04-27 15:39 +0000

#2538 — Webstart windows warning

From"lemmi" <lemmi@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectWebstart windows warning
Message-ID<1190811090.809577.270200@50g2000hsm.googlegroups.com>
  To: comp.lang.java.gui
Hi,

can anyone tell me whether it is possible to get rid of the warning
message at the bottom of webstart windows when the windows are
children windows without decoration? My application window is a JFrame
and it opens up several Window instances. The JFrame is the parent
window and already shows a warning message to the user, why do all the
children winodws have to do the same? Aren't popup menus also just
windows without decoration? Why don't they show the warning message?

--Dirk

P.S.: the webstart demo can be found at http://www.dlsc.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [next] | [standalone]


#2539 — Re: Webstart windows warn

From"bcd" <bcd@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectRe: Webstart windows warn
Message-ID<fddlai$92h$1@orkan.itea.ntnu.no>
In reply to#2538
  To: comp.lang.java.gui
In article <1190811090.809577.270200@50g2000hsm.googlegroups.com>,
lemmi  <dlemmermann@gmail.com> wrote:
>Hi,
>
>can anyone tell me whether it is possible to get rid of the warning
>message at the bottom of webstart windows when the windows are
>children windows without decoration?

You can sign your webstart app, or else you can configure Java to
allow undecorated windows to everyone (I would recommend the former).

> My application window is a JFrame
>and it opens up several Window instances. The JFrame is the parent
>window and already shows a warning message to the user, why do all the
>children winodws have to do the same?

Because any one of them could be made to say "This is a friendly
notice from your bank. Please input your acct# and password" and be
made to look exactly like the real thing.

> Aren't popup menus also just
>windows without decoration? Why don't they show the warning message?

Possibly because Swing guarantees that they will never be so easily
coopted into confusing/misleading the user. I don't really remember if
this is actually the case or not. Or perhaps the popups aren't really
windows as such, but lightweight components painted entirely within
the bounds of the parent window. Try to provoke a popup to appear that
has bounds exceeding the window it lives in. This might cause Swing to
paint it using a heavyweight component, which might get decorated.

Cheers
	Bent D
-- 
Bent Dalager - bcd@pvv.org - http://www.pvv.org/~bcd
                                    powered by emacs

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]


#2540 — Re: Webstart windows warn

From"Andrew Thompson" <andrew.thompson@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectRe: Webstart windows warn
Message-ID<78cc1f97ec352@uwe>
In reply to#2539
  To: comp.lang.java.gui
Bent C Dalager wrote:
..
>>can anyone tell me whether it is possible to get rid of the warning
>>message at the bottom of webstart windows when the windows are
>>children windows without decoration?
>
>You can sign your webstart app, or else you can configure Java to
>allow undecorated windows to everyone (I would recommend the former).

Huhh..  Not that I'd want to, but how is the second achieved?

>> My application window is a JFrame
>>and it opens up several Window instances. The JFrame is the parent
>>window and already shows a warning message to the user, why do all the
>>children winodws have to do the same?
>
>Because any one of them could be made to say "This is a friendly
>notice from your bank. Please input your acct# and password" and be
>made to look exactly like the real thing.

Oh, and one teensy addition is that the developer might
choose to set the root JFrame to a size of 1x1, and a 
position of (-400,-400), so it potentially never appears to 
the end user.  Or they might just never set it visible, but 
that might also have flow-on effects to children.

-- 
Andrew Thompson
http://www.athompson.info/andrew/

Message posted via JavaKB.com
http://www.javakb.com/Uwe/Forums.aspx/java-gui/200709/1

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]


#2541 — Re: Webstart windows warn

From"bcd" <bcd@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectRe: Webstart windows warn
Message-ID<fddse5$d0o$1@orkan.itea.ntnu.no>
In reply to#2540
  To: comp.lang.java.gui
In article <78cc1f97ec352@uwe>, Andrew Thompson <u32984@uwe> wrote:
>Bent C Dalager wrote:
>..
>>>can anyone tell me whether it is possible to get rid of the warning
>>>message at the bottom of webstart windows when the windows are
>>>children windows without decoration?
>>
>>You can sign your webstart app, or else you can configure Java to
>>allow undecorated windows to everyone (I would recommend the former).
>
>Huhh..  Not that I'd want to, but how is the second achieved?

There is a file java.policy and one javaws.policy (in
jre/lib/security) that can be used to grant permissions based on a
number of criteria (including, presumably, a wildcard criteria). How,
I wouldn't really know, since I make a point out of never messing with
this :-)

Cheers
	Bent D
-- 
Bent Dalager - bcd@pvv.org - http://www.pvv.org/~bcd
                                    powered by emacs

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]


#2542 — Re: Webstart windows warn

From"Andrew Thompson" <andrew.thompson@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectRe: Webstart windows warn
Message-ID<78ccaa7375527@uwe>
In reply to#2541
  To: comp.lang.java.gui
Bent C Dalager wrote:
>>..
>>>>can anyone tell me whether it is possible to get rid of the warning
>[quoted text clipped - 5 lines]
>>
>>Huhh..  Not that I'd want to, but how is the second achieved?
>
>There is a file java.policy and one javaws.policy (in
>jre/lib/security) 

Ah yes.  The dreaded policy files.  I deeply detest that
Sun has mentioned them in anything more than one or
two obscure references.

If I had a dollar for every time I have tried to convince
applet (mostly) developers that editing policy files to
get their 'full permissions' applet to work is a lost cause,
I'd be lazing on a beach in the sun, drinking insanely
illogical cocktails, rather than sitting here ..talking to 
you lot.

>..that can be used to grant permissions based on a
>number of criteria (including, presumably, a wildcard criteria). How,
>I wouldn't really know, since I make a point out of never messing with
>this :-)

Right there with ya'.  I do not regard it as a logical 
option, even for development purposes.

-- 
Andrew Thompson
http://www.athompson.info/andrew/

Message posted via JavaKB.com
http://www.javakb.com/Uwe/Forums.aspx/java-gui/200709/1

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]


#2545 — Re: Webstart windows warn

From"Roedy Green" <roedy.green@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectRe: Webstart windows warn
Message-ID<j28mf31e698u41554sk0i2jcjvreeirmvu@4ax.com>
In reply to#2542
  To: comp.lang.java.gui
On Wed, 26 Sep 2007 15:18:05 GMT, "Andrew Thompson" <u32984@uwe>
wrote, quoted or indirectly quoted someone who said :

>
>If I had a dollar for every time I have tried to convince
>applet (mostly) developers that editing policy files to
>get their 'full permissions' applet to work is a lost cause,
>I'd be lazing on a beach in the sun, drinking insanely
>illogical cocktails, rather than sitting here ..talking to 
>you lot.

Perhaps they have never worked in a bureaucracy where you had to fill
out forms in triplicate to request a pencil.
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [next] | [standalone]


#2544 — Re: Webstart windows warn

From"Roedy Green" <roedy.green@THRWHITE.remove-dii-this>
Date2011-04-27 15:39 +0000
SubjectRe: Webstart windows warn
Message-ID<1t7mf3978557030t89tfqcrmpv2ujs0olj@4ax.com>
In reply to#2538
  To: comp.lang.java.gui
On Wed, 26 Sep 2007 12:51:30 -0000, lemmi <dlemmermann@gmail.com>
wrote, quoted or indirectly quoted someone who said :

>can anyone tell me whether it is possible to get rid of the warning
>message at the bottom of webstart windows when the windows are
>children windows without decoration? My application window is a JFrame
>and it opens up several Window instances. The JFrame is the parent
>window and already shows a warning message to the user, why do all the
>children winodws have to do the same? Aren't popup menus also just
>windows without decoration? Why don't they show the warning message?

Consider. Why is Java Web Start doing this?

They want to stop you from creating a web page that looks like a
simple form, but that actually captures and sends data immediately.

You are trying to subvert this security feature.  If you succeed, Sun
has failed.

So instead, think about how you might relinquish your ability to fool.

Consider:

1. adding frames.

2. using internal frames.
-- 
Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

---
 * Synchronet * The Whitehouse BBS --- whitehouse.hulds.com --- check it out free usenet!
--- Synchronet 3.15a-Win32 NewsLink 1.92
Time Warp of the Future BBS - telnet://time.synchro.net:24

[toc] | [prev] | [standalone]


Back to top | Article view | comp.lang.java.gui


csiph-web