Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!eternal-september.org!feeder.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: markspace <markspace@nospam.nospam>
Newsgroups: comp.lang.java.programmer
Subject: Re: Webstart security message
Date: Mon, 07 Apr 2014 08:29:10 -0700
Organization: A noiseless patient Spider
Lines: 32
Message-ID: <lhug86$2o1$1@dont-email.me>
References: <5a768a16-8e6a-4517-a8e8-d7bf136185e7@googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Mon, 7 Apr 2014 15:29:10 +0000 (UTC)
Injection-Info: mx05.eternal-september.org; posting-host="9358cda03e1e0dfd3c4b757daa608707"; logging-data="2817"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19RGSn21MWWD6UHU5Nc4vNEz2zwLOH0jJ8="
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
In-Reply-To: <5a768a16-8e6a-4517-a8e8-d7bf136185e7@googlegroups.com>
Cancel-Lock: sha1:q1hvzIerA+6ZiOQRZqfUHTOwMmQ=
Xref: csiph.com comp.lang.java.programmer:27979

On 4/7/2014 7:07 AM, Dirk Niemeier wrote:
> Hi, since 1.7.0.51 update I get every application start an security
> message. My webstart app is an intranet local application and I need
> unresticted access. The message is: "do you want to start this
> application?" (this application need unrestricted acces, this can be
> a risk,.....) free translation from german.


<http://www.java.com/en/download/faq/signed_code.xml>


Quote:

"Developers: As of 7u51, (January, 2014), your Rich Internet 
Applications (RIAs, also known as Applets and Web Start applications) 
must be updated. The updates required are on the packaging and 
distribution; no API code changes should be required. The impetus for 
these changes relates to potential re-purposing of sandboxed 
applications, whereby placing permissions within a signed JAR prevents 
modification of your specified permission level.
RIAs must contain two things:

     Code signatures from a trusted authority. All code for Applets and 
Web Start applications must be signed, regardless of its Permissions 
attributes.
     Manifest Attributes
         Permissions – Introduced in 7u25, and required as of 7u51. 
Indicates if the RIA should run within the sandbox or require 
full-permissions.
         Codebase – Introduced in 7u25 and optional/encouraged as of 
7u51. Points to the known location of the hosted code."