Java I/O
9
Security Issues
I don't know if there's one most frequently asked question about Java Network Programming,
but there's definitely a most frequent answer, and it applies to this book too. My mistake in
Java Network Programming was hiding that answer in the back of a chapter most people
didn't read. Since that very same answer should answer an equal number of questions from
readers of this book, I want to get it out of the way right up front:
Java's security manager prevents almost all the examples and methods discussed in this book
from working in an applet.
This book focuses very much on applications. There is very little that can be done with I/O
from an untrusted applet without running afoul of the security manager. The problem may not
always be obvious—not all web browsers properly report security exceptions—but it is there.
There are some exceptions. Byte array streams and piped streams work without limitation in
applets. Network connections can be made back to the host from whence the applet came (and
only to that host). System.in and System.out may be accessible from some, though not all,
web browsers. And in Java 2 and later, there are ways to relax the restrictions on applets so
they get limited access to the filesystem or unlimited access to the network. However, these
are exceptions, not the rule.
If you can make an applet work when run as a standalone application and you cannot get it to
work inside a web browser, the problem is almost certainly a conflict with the browser's
security manager.
Conventions Used in This Book
Italic is used for:
• Filenames (readme.txt )
• Host and domain names (http://www.oreilly.com/)
• URLs (http://metalab.unc.edu/javafaq/)
Constant width is used for:
• Code examples and fragments
• Class, variable, and method names, and Java keywords used within the text
Significant code fragments and complete programs are generally placed in a separate
paragraph like this:
InputStream in = new FileInputStream("/etc/mailcap");
When code is presented as fragments rather than complete programs, the existence of the
appropriate
import statements should be inferred. For example, in the previous code fragment
you may assume that java.io.InputStream and java.io.FileInputStream were
imported.
剩余478页未读，继续阅读
沙糖橘
- 粉丝: 128
- 资源: 49
我的内容管理
展开
最新资源
- Vue实现iOS原生Picker组件：详细解析与实现思路
- Arduino蓝牙小车：参数调试与功能控制
- 百度Java面试精华：200页精选资源涵盖核心知识点
- Swift使用CoreData填坑指南：CoreData在Swift 3.0的变化
- 微距离无线充电器创新设计及其实验探索
- MTK Android平台开发全攻略：44步详解流程
- RecyclerView全面解析：替代ListView的新选择
- Android开发：自动适配中英文键盘解决方案
- Android调用WebService接口教程
- Android开发：BitmapUtil图片处理全解析与实例
- Android多线程断点续传实现详解
- PCA算法在人脸识别会议签到系统中的应用
- EventBus 3.0：Android事件总线详解与实战应用
- Android FileUtil：全面解析文件操作实用技巧与实例
- RecyclerView添加头部和尾部实战教程
- Android实现微博滑动固定顶部栏实战与优化
资源上传下载、课程学习等过程中有任何疑问或建议，欢迎提出宝贵意见哦~我们会及时处理！
点击此处反馈
