4 ms·

Client-side (browser-plugin) only: Java in the browser (applets, web start) runs in a plugin which is supposed to have a strong sandbox to prevent applications

Client-side (browser-plugin) only: Java in the browser (applets, web start) runs in a plugin which is supposed to have a strong sandbox to prevent applications from doing things like touching files or controlling your window manager without your permission. On the server (or invoked from the commandline/jar), the security policy is much looser and there's no sandboxing (outside of what the OS and interpreter prevent).

jiggy2011 14y ago
Yes, although I would generally recommend running your server side Java software inside a chroot jail.
- foohbarbaz 14y ago
  That's pretty silly. Why?
  - yuliyp 14y ago
    To be fair, running any internet-facing apps in a chroot jail is a good idea no matter which language they use.
  - jiggy2011 14y ago
    Isolation, helps to limit the damage done by a random bug or attack. Can also be useful when you have apps with weird dependencies.