summaryrefslogtreecommitdiffstats
path: root/jnlp-files/applet-gears.html
diff options
context:
space:
mode:
Diffstat (limited to 'jnlp-files/applet-gears.html')
-rw-r--r--jnlp-files/applet-gears.html12
1 files changed, 6 insertions, 6 deletions
diff --git a/jnlp-files/applet-gears.html b/jnlp-files/applet-gears.html
index 94f563f..727436a 100644
--- a/jnlp-files/applet-gears.html
+++ b/jnlp-files/applet-gears.html
@@ -87,10 +87,6 @@ Where the referenced JNLP file <em>applet-gears.jnlp</em> looks as follow:
&lt;offline-allowed/&gt;
&lt;/information&gt;
&lt;update check="background" policy="always"/&gt;
- &lt;security&gt;
- &lt;all-permissions/&gt;
- &lt;/security&gt;
-
&lt;resources&gt;
&lt;j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/&gt;
@@ -120,8 +116,12 @@ Java code which needs to be signed in order to deploy applets using
JOGL and is the only certificate the end user must accept.
</del><br/>
Sadly, due to Oracle's Java Applet Plugin update 7u51,
-unsigned applets are no more allowed and hence the
-Applet sandbox is being taken away.
+unsigned applets are no more allowed and effectively
+lower the bar to create user applets with raised privileges.<br/>
+Hence JogAmp Community <b>signs</b> jogl-all.jar and gluegen-rt.jar, which contain the
+JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.<br/>
+jogl-demos.jar's manifest file uses <i>Permissions: sandbox</i>
+to <b>not raise privileges</b>.
</p>
</body>