Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6218769

Improve security banner for unsigned applets/applications

    XMLWordPrintable

Details

    • x86
    • windows_xp

    Description

      A DESCRIPTION OF THE REQUEST :
      JWS application puts a "java application window" message at the bottom of every window frame in MS windows. Even worse on Linux it is placed near the top of the window. This is extremely ugly and in many cases is a show stopper for using JWS. The only way around it is to give the JWS application full security access to the host machine which defeats the reason of having a java sandbox security model to begin with.


      JUSTIFICATION :
      I understand the reason for the message. It is there for security reasons so that a rogue application does'nt try to disguise itself to into something it is not. But the problem with the current implementation is that if forces us to avoid the sandbox security model to begin with, so as you can see it defeats the whole purpose of JWS sandbox security.

        To address this issue, I propose that JWS frames/windows do what web browsers do (like IE and Firefox). Put the "java application window" message in the title bar of the window. And in the case where the window does not have a border/titlebar, then only in that case put the message at the bottom of the window.

      And please implement it the same way for both MS Window and Unix/Linux.
      ###@###.### 2005-1-19 01:07:37 GMT

      Attachments

        Activity

          People

            anthony Anthony Petrov (Inactive)
            gmanwanisunw Girish Manwani (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: