的Java 7u51 / 7u55清单变量与Asterisk [英] Java 7u51/7u55 Manifest Variables with Asterisk

问题描述

我与清单中的下一个变量部署一个applet：

I'm deploying an applet with the next variables in the manifest:

Manifest-Version: 2.0

Ant-Version: Apache Ant 1.8.2

Trusted-Library: true

Permissions: all-permissions

Application-Name: My Applet

Codebase: *

Application-Library-Allowable-Codebase: *

Caller-Allowable-Codebase: *

我在想，如果在previous值使用星号，我的小程序（一次部署）可以通过Java或甲骨文在未来的版本与7u51黑名单或现在（或者该证书可以被列入黑名单）。是否确定要在这里使用星号？

I was wondering if by using the asterisk in the previous values, my applet (once deployed) can be blacklisted by Java or by Oracle in a future version or now with the 7u51 (or perhaps the certificate can be blacklisted). Is it ok to use asterisks here?

我知道是不是最安全的措施，因为我的小程序，可以放置在任何领域和使用，但我必须部署小程序，以一个非常大集不同的领域，所以我只是想创建的每一个小程序域控制我（我这样做，它工作的Java 7u40和更早版本）。

I know is not the safest measure because my applet can be placed in any domain and be used, but I have to deploy the applet to a very large set of different domains, so I just want to create a single applet for every domain I control (I did this and it works for Java 7u40 and earlier versions).

感谢您的帮助。

===更新 - 的Java 7u55 ===

在Java 7u55，如果包括独立的星号作为在来电显示Allowable- codeBase的变量值，你会一旦程序下载得到一个安全提示。更多信息：的Java博客8u5 / 7u55

With Java 7u55, if you include a stand-alone asterisk as value in the Caller-Allowable-Codebase variable, you will get a security prompt once the applet is loaded. More info: Java Blog 8u5/7u55

推荐答案

正如你可以在这里阅读：的 http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/manifest.html#$c$cbase
该asteriks确实是有效的（codebase-）属性值。据我所知，codeBase的属性，因此也是可选的，和Java不会抱怨，如果这些都不是present。仅在主jar文件的权限和应用程序名称的属性。在Java 7u45它会抱怨所有库jar文件藏汉，但由于7u51它只是做它的主缸。

As you can read here: http://docs.oracle.com/javase/7/docs/technotes/guides/jweb/manifest.html#codebase The asteriks indeed is a valid (codebase-)property value. As far as I know, the codebase attributes are therefore also optional, and Java will not complain if these are not present. Only for the permissions and Application-name attributes in the main jar file. In Java 7u45 it would complain for all the library jar files aswell, but since 7u51 it only does it for the main jar.

这篇关于的Java 7u51 / 7u55清单变量与Asterisk的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！