Talk About Network

Google


Register and Login
Nick
Password
Register create new account Sign up is FREE and you can post replies, new topics, bookmark posts and more!
Recover lost password


Programming > Java Security > interesting app...
Latest [ Topics | Posts ] Archive Post A New Topic Post a Reply
<< Topic < Post Post 1 of 9 Topic 1682 of 1792
Post > Topic >>

interesting applet security problem

by Eric Smith <eric@[EMAIL PROTECTED] > Mar 21, 2007 at 10:46 PM

I've got a Java applet that talks to a back-end server.  The applet
has a "Start" button that causes it to establish the connection.

The back-end server is NOT the web server that the HTML web page
containing the applet comes from, so the applet JAR file is stored on
the back-end server, and the HTML code references the JAR file by
an absolute URL with that back-end server as the host.

That works fine.

Now we want to replace the GUI presented by the applet with one
implemented in Javascript.  The applet itself becomes faceless
(applet tag has width=0 and height=0).  The JavaScript calls a
method in the applet to do what the "Start" button did before.

That works fine, *if* the web page and applet are on the same
server.  It fails if they are not.

I spent some time trying to figure out why.  As near as I can tell,
the problem is that when the JavaScript running in the browser
makes a method call into the applet, even though it is calling
the same method the Start button did, it is calling it from a
different thread.

The Start button is called in a thread that toString re****ts as
    "Thread[AWT-EventQueue-4,4,<html-page-url>/-threadGroup]".

The method called by Javascript is in a thread that toString re****ts as
    "Thread[Thread-2,5,main]".

Are there really different security policies in place in the applet
based on which thread is running?

Thanks!
Eric
 




 9 Posts in Topic:
interesting applet security problem
Eric Smith <eric@[EMAI  2007-03-21 22:46:01 
Re: interesting applet security problem
"Andrew Thompson&quo  2007-03-22 00:32:55 
Re: interesting applet security problem
Eric Smith <eric@[EMAI  2007-03-23 15:18:05 
Re: interesting applet security problem
Lew <lew@[EMAIL PROTEC  2007-03-24 12:50:38 
Re: interesting applet security problem
Eric Smith <eric@[EMAI  2007-03-24 11:45:55 
Re: interesting applet security problem
Lew <lew@[EMAIL PROTEC  2007-03-24 20:47:46 
Re: interesting applet security problem
Eric Smith <eric@[EMAI  2007-03-26 11:15:09 
Re: interesting applet security problem
Tom Hawtin <usenet@[EM  2007-03-23 07:13:54 
Re: interesting applet security problem
Eric Smith <eric@[EMAI  2007-03-23 15:16:17 

Post A Reply:
  Go here to Signup

AddThis Feed Button


About - Advertising - Contact - Frequently Asked Questions - Privacy Policy - Terms of Use - Signup

Contact
tan12V112 Sat Jul 26 5:05:54 CDT 2008.