SandBox

Unsigned Java applets are run in a sandbox environment, where applets are restricted in the operations they can perform. For example, the sandbox prevents unsigned applets from reading or writing local files on the user's computer. To escape the confines of the sandbox, an applet must be signed with a digital certificate. The applet must still request the desired permission upon where the user's browser displays a grant permission dialog window. Only if the user grants the permission will the applet be allowed to actually perform the operation.

Articles

• The Java Sandbox OnJava.com
• Understanding the keys to Java security -- the sandbox and authentication JavaWorld, May 1997.

Books

• The Base Java Security Model: The Original Applet Sandbox Chapter two of Securing Java by Gary McGraw and Edward W. Felten.

%DRAWING{MainChart}%

-- Main.redwolf - 27 Aug 2003

Discussion about SandBox