hi guys,
i wanted to know if there were any kind of security issues on the server side if an applet or any java program is embedded in the JSP and run from the Server Side,
since i think... when an Applet is loaded from a JSP on the server side a trusted connection between client and server is established and hence technically the client can send viruses or other unwanted code through this trusted connection to the Server Side. how can this be prevented ??
Thanx in Advance
Regards,
Orjun
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
the applet does not run on the server, even if its embedded in a jsp or asp or php or whatever page.
the applet always run on the client machine.
therefor, the answer to your question is no.
applet does not have security issues that are jsp related.
(but they have planty of security issues that are not).
We talk of access restrictions , tight security restrictions with respect to protecting the client machine from malicious attacks from applets downloaded from unknown sites.
So protecting the server is really not a issue as the applet that is downloaded from your server can only do, what you program it to do.
The point also to be noted is that only the applet can use the connection it makes with the server ,. The client cannot just send some virus or other unwanted code as raised by your concern.
Prabhu
Business Accounts
Answer for Membership
by: prabhukrishnanPosted on 2000-10-11 at 08:13:10ID: 4676481
I don't think that is really a potential problem.
1) The applet is downloaded from the server. So the access of the system or what the applet can actually do is dictated by the applet itself.
2) I don't think there is any difference between loading applet from a plain html and from a jsp , because , JSP is finally getting compiled to a servlet and all the servlet can send back is html.
So when the JSP is invoked , a html is returned which has a link to the applet . When the browser comes across this applet tag link ,
it fetches it as a seperate request.
So I think security is same as that of a applet loaded by a html
Prabhu