Subj : Re: Security Problem
To   : netscape.public.mozilla.jseng
From : Keno Albrecht
Date : Thu Jul 08 2004 11:16 pm

Hey,

I signed my jar file (at least with on my local machine with a 
selfmade/selfsigning certificate) but it didn't change anything :-(.

Have you ever tried it? I just created a certificate, signed the jar and 
run the same stuff again. Nothing changed. Than I imported my public key 
to the Java Control Panel, but the same again. Am I doing something wrong?

Thanks,
Keno

> Your code will be less restricted if they are properly signed and accepted
> by the user.
> 
> Go apply for a e-cert form your local CA, but this is NOT free.
> 
> There may be dirty/evil way to override this. But I don't think you'll want
> it as they'll be browser dependent. And you won't get them useful here as
> should anyone here post it, it'll be fixed quickly and you'll have to face
> the problem again.
> 
> "Keno Albrecht" <kenoa@inf.ethz.ch> ??? news:ccgfft$jnc2@ripley.netscape.com
> ???...
> 
>>Hello,
>>
>>I'm writing a Mozilla Extension using LiveConnect to access my own
>>classes. Since I didn't find out where to put my classes (except the
>>jre/classes directory which is not useful since I want them somewhere in
>>the Mozilla directory to install them with xpi later), I use a
>>URLClassLoader to access/load them.
>>
>>Now, the problem is that there seems to be a rather restrictive
>>SecurityManager - I cannot read/write local files, open connections etc.
>>Also, Frames are marked with an "Applet-Flag". Well, I do not wrote an
>>Applet, this is an Extension directly linked into XUL/.js Code, so can I
>>avoid these security restrictions somehow?
>>
>>Thanks,
>>Keno
> 
> 
>

.