diff options
| author | Sven Gothel <[email protected]> | 2014-01-22 10:58:22 +0100 |
|---|---|---|
| committer | Sven Gothel <[email protected]> | 2014-01-22 10:58:22 +0100 |
| commit | b15b2a31cb4ec8ebaaf435259a66644d81fdb4a9 (patch) | |
| tree | 17e0f3689ee792d0b92c949a20388d16dfa08b05 /jnlp-files/applet-gears.html | |
| parent | 971190d8718bb1e2b7eafdd49cfa2523dd8a8152 (diff) | |
Refine adaption of Oracle's Deployment changes, i.e. >= 7u51
Partial revert commit 971190d8718bb1e2b7eafdd49cfa2523dd8a8152:
- Manifest: 'Permissions: sandbox'
so we do not raise privileges!
Refine description about signing, sandbox and privileges in html files.
Diffstat (limited to 'jnlp-files/applet-gears.html')
| -rw-r--r-- | jnlp-files/applet-gears.html | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/jnlp-files/applet-gears.html b/jnlp-files/applet-gears.html index 94f563f..727436a 100644 --- a/jnlp-files/applet-gears.html +++ b/jnlp-files/applet-gears.html @@ -87,10 +87,6 @@ Where the referenced JNLP file <em>applet-gears.jnlp</em> looks as follow: <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> - <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> @@ -120,8 +116,12 @@ Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept. </del><br/> Sadly, due to Oracle's Java Applet Plugin update 7u51, -unsigned applets are no more allowed and hence the -Applet sandbox is being taken away. +unsigned applets are no more allowed and effectively +lower the bar to create user applets with raised privileges.<br/> +Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the +JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/> +jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i> +to <b>not raise privileges</b>. </p> </body> |