替代技术，以取代小程序？ [英] Alternative technologies to replace applet?
问题描述
我有让你画一个逻辑电路，并测试它的屏幕（有点像的Electronics Workbench）的（无符号）小程序，然后将其序列化电路（内部形式，而不是视觉重presentations ），并把它发送到何处一堆自动运行测试和性能报告产生服务器。这是一个更大的web应用程序的一个小而关键的部分。
不过，最新的Java插件现在这样说：
运行未签名的应用程序，如这将在未来版本中被阻止，因为它是潜在的危险和安全风险。
现在，自签署它仍然明显工作（现在），但随后的code运行外沙箱，这在我看来是一个愚蠢的方式做事情，即使我的code是当然完全无bug！ （我你有兴趣和购买的桥梁？）Oracle网站我见到这对进一步阅读：
该平台的不会的否认Java应用程序的执行......以后的更新版本可能包括额外的修改，以限制像无符号和自签名的应用程序不安全行为。
（这听起来像它的意思是未来的更新的将会的否认Java应用程序的执行力 - 除非你付钱给斯维特或Verisign定期和揭露用户code沙箱之外运行。）
他们还说，
即使是在用户体验的最小变化有时是麻烦的。
（别开玩笑。）
我们已经考虑更改如何影响用户体验。鉴于目前的气候在浏览器中围绕Java的安全性，code签署是为了保护Java的用户有价值的安全控制。
好吧，我不知道怎样才能继续在这些情况下使用Java。球门柱已移动（再次），现在我正在寻找一个不同的足球队......以上precisely，我正在寻找一种替代技术，可以让我继续做我现在做的事：拖放放大器;下降的电路元件，通过输入和输出或其它连接之间拖动创建连接，最后拿图的内部形式，它喷出来的形式的服务器，可德codeD和行使，preferably通过正是创建的图表一样code，以避免版本头痛。而且东西是安全的，只是因为我已经签了不能垃圾的本地文件系统或什么的。
任何人都可以提出，我应该寻找下一个，现在，甲骨文已经让我的生活是一场噩梦？
解决方案
（这听起来像它的意思是未来的更新会否认Java应用程序的执行。 - 除非你付钱给斯维特或Verisign定期和揭露用户code沙箱之外运行）
一个签名的applet使用JNLP仍可沙箱启动。
但如果你真的想避免它。
我觉得你描述了可以使用JavaScript的逻辑和和一个HTML 5 <$提供C $ C>画布 的渲染。
我会避免的Flash，因为它也容易受到安全漏洞。这就好比自己挖一个全新的孔深陷于
I have an (unsigned) applet that let you draw a logic circuit and test it on-screen (a bit like Electronics Workbench), and it then serializes the circuit (the internal form, not the visual representations) and sends it to the server where a bunch of automated tests are run and a performance report is produced. This is a small but crucial part of a much larger web app.
However, the latest Java plug-in now says this:
Running unsigned applications like this will be blocked in a future release because it is potentially unsafe and a security risk.
Now, self-signing it will still apparently work (for now), but then the code runs OUTSIDE the sandbox, which strikes me as a stupid way to do things, even though my code is of course completely bug-free! (Can I interest you in buying a bridge?) Reading further on the Oracle website I see this:
The platform will not deny the execution of Java applications... Future update releases may include additional changes to restrict unsafe behaviors like unsigned and self-signed applications."
(Which sounds like it means "Future updates will deny the execution of Java applications" -- unless you pay money to Thwaite or Verisign on a regular basis AND expose users to code running outside a sandbox.)
They also say
"Even the smallest changes in user experience are sometimes troublesome".
(No kidding.)
"We have considered how changes affect user experience. Given the current climate around Java security in the browser, code signing is a valuable security control for protecting Java users."
Well, I don't see how I can continue using Java under these circumstances. The goalposts have been moved (again), and now I'm looking for a different football team... or more precisely, I'm looking for an alternative technology that will let me continue to do what I do now: drag & drop circuit elements, create connections by dragging between input and outputs or other connections, and finally take the internal form of the diagram and squirt it to the server in a form which can be decoded and exercised, preferably by exactly the same code that created the diagram to avoid versioning headaches. And something which is safe, which can't trash the local filesystem or whatever just because I've signed it.
Can anyone suggest where I should be looking next, now that Oracle has made my life a nightmare?
解决方案(Which sounds like it means "Future updates will deny the execution of Java applications" -- unless you pay money to Thwaite or Verisign on a regular basis AND expose users to code running outside a sandbox.)
A signed applet launched using JNLP can still be sand-boxed.
But if you really wish to avoid it..
I think what you described can be provided using JavaScript for the logic and and an HTML 5
canvasfor the rendering.I would avoid Flash, since it is also susceptible to security bugs. It would be like digging yourself a brand new hole to get trapped in.
这篇关于替代技术，以取代小程序？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
