From b15b2a31cb4ec8ebaaf435259a66644d81fdb4a9 Mon Sep 17 00:00:00 2001 From: Sven Gothel Date: Wed, 22 Jan 2014 10:58:22 +0100 Subject: Refine adaption of Oracle's Deployment changes, i.e. >= 7u51 Partial revert commit 971190d8718bb1e2b7eafdd49cfa2523dd8a8152: - Manifest: 'Permissions: sandbox' so we do not raise privileges! Refine description about signing, sandbox and privileges in html files. --- jnlp-files/applet-gears.html | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) (limited to 'jnlp-files/applet-gears.html') diff --git a/jnlp-files/applet-gears.html b/jnlp-files/applet-gears.html index 94f563f..727436a 100644 --- a/jnlp-files/applet-gears.html +++ b/jnlp-files/applet-gears.html @@ -87,10 +87,6 @@ Where the referenced JNLP file applet-gears.jnlp looks as follow: <offline-allowed/> </information> <update check="background" policy="always"/> - <security> - <all-permissions/> - </security> - <resources> <j2se href="http://java.sun.com/products/autodl/j2se" version="1.4+"/> @@ -120,8 +116,12 @@ Java code which needs to be signed in order to deploy applets using JOGL and is the only certificate the end user must accept.
Sadly, due to Oracle's Java Applet Plugin update 7u51, -unsigned applets are no more allowed and hence the -Applet sandbox is being taken away. +unsigned applets are no more allowed and effectively +lower the bar to create user applets with raised privileges.
+Hence JogAmp Community signs jogl-all.jar and gluegen-rt.jar, which contain the +JOGL's supporting classes as well as jogl-demos.jar, which contains the GearsApplet class.
+jogl-demos.jar's manifest file uses Permissions: sandbox +to not raise privileges.

-- cgit v1.2.3