How To Force Outdated Java To Run Regardless Of Security
Jun 3, 2015I wanna run apps using an outdated version of Java and not have it stop me for security certificates.
View Replies
ADVERTISEMENT
JRE :: Java DeploymentRuleSet - Force Attribute
Oct 27, 2014We've implemented the Whitelist and there's an application I need to use the Force attribute with, however, I'm unable to get this to work. As I read it, this code says use Java 1.6_24 for Example.com and any other applications are blocked from running. There are three versions of Java installed - 1.6_24, 1.7_65 & 1.8_25. The Java console shows 1.8_25 being called.
Here's the ruleset.
<ruleset version="1.1+"> <rule> <id location=https://example.com />
<action permission="run" version="1.6_24" force="true" /> </rule>
<rule> <id /> <action permission="block">
<message> This application is blocked due to Java restrictions, please contact the Service Desk for assistance.</message> </action> </rule></ruleset>
I also tried
<action force="true" permission="run" version="1.6.0_24" />
and also
<action force="true" version="1.6.0_24" permission="run" />.
The Java console is still showing version 1.8.0_25.
Java Into Executable Jar Force Horizontal Scrollbar
Apr 14, 2015I have made a simple h2 db viewer using jdbc and in eclipse it has a horizontal scrollbar so it works and displays correctly.
When I run the jar from cmd it works as it should but the results all go onto new lines so all formatting is lost and it looks.. ugly...
somehow make it so the console has a forced horizontal scrollbar but dunno how.
Applets :: Accessing Java Application Without Adding Site To Java Security
Sep 12, 2014I have tried running the java application without adding the site to site list in java security tab. But I get a sand box message as APPLICATION BLOCKED BY SECURITY SETTINGS. How to run the java application without adding the site to site list in java security tab.
View Replies View RelatedChange Java Security Settings
Dec 8, 2014I have made a very simple Java applet.
<HTML>
<BODY>
<CENTER>
<APPLET CODE="HelloWorldApp.class" WIDTH="862" HEIGHT="512"></APPLET>
</CENTER>
</BODY>
</HTML>
But when i try to open it i get the message: Application Blocked. Click for details.
- The list i see doesn't work
- If i click Ignore nothing happens
- If i click reload nothing happens
When i read and search the net i have to change my java security settings. The security setting are HIGH and i cannot change that.But i can fill in an Exception Site List...The hello.html file is on my NAS : file:///X:/Lantronix/hello.html..I fill this in the exception Site list -> I get a message that it is a security risk to add this location.
Java Servlet :: EAR Deployment File Security
Jul 10, 2012I have been trying to find all day long a way to secure my .ear file from modifications made by third parties... My product is packaged as an .ear file which i send for deployment to other administrators. What i am looking for is a way to "sign" my version of .ear versus the deployed version of .ear to be sure that no modification has been made to my code...
View Replies View RelatedJava Servlet :: How To Force Browser To Open / Save / Save As File From Server
Sep 25, 2012How to force browser to open/save/save as the file from server instead of browser cache.
I am creating a csv file through a pl/sql procedure and forwarding the link to user once user clicks on link he downloads the file, however if the same thing is repeated then browser returns the old cached file instead of new file generated on server.
JSF :: How To Force Refresh Screen
Oct 9, 2014in my JSF2 app I have screens composed with :
- Header
- Body
In the header I have a combo list. At each change in value in the combo list I have an Ajax request that updates the data in the Body. So far everything is working properly. Now the home screen's structure should be change when the value of combo list change. To do this I have :
- 1 ManagedBean HomeBean that manage the home
- 1 ManagedBean HeaderBean that manage the header
- 2 object HomeScreen1.java and HomeScreen2.java that allows me to valued data from each screen
- 2 services HomeScreen1Loader.java and HomeScreen2Loader.java that manage loading of each type of screen
- 1 template home.xhtml
- 2 fichier home1.xhtml et home2.xhtml
When I log in to the application, I get the good page corresponding (Element type 1 => home page 1). But when I select a type 2 item, the actionListener methode is execute, ManagedBean's data was updated (for type 2 screen) , but the page does not updated. What do you do ?
HeaderBean.java :
package com.omb.view;
import java.io.Serializable;
import java.util.List;
import javax.faces.event.ValueChangeEvent;
import javax.faces.model.SelectItem;
[Code] .....
Brute Force On Variables
Jan 26, 2015I have this code:
int[] X = new int[5];//X array declaration of 5 , might go higher to 10000~
for(int x_position=0;x_position<5;x_position++){//Starting X values
X[x_position]=1;
}
for(int x_value=1;x_value<=9;x_value++){
System.out.println();
for(int x_position=0;x_position<5;x_position++){
X[x_position]=x_value;
System.out.print("X["+x_position+"] = "+x_value+"; ");
[code]....
Each X[x_position] after a single cycle will be then put into char[x][y] at needed coordinates. x and y may have values from 9 to 4096;
Force JRE Installation In JNLP
Jul 17, 2014Whether it is possible to force the installation of JRE when trying to open JNLP file. It is quite often case when users try to run JWS application without JRE installed. The best option would be to force the installation or at least display some message with instructions. Perhaps there are different ways to handle this problem.
View Replies View RelatedWhy Does Compiler / IDE Force To Use Static In Code
Oct 24, 2014I'm a beginner fiddling around classes in Java. I noticed on this particular code, Eclipse will give me an error and suggest I put the static keyword in front of the variable.
public class test {
//the following line is where Eclipse puts the static keyword
static FileAccess hello = new FileAccess("D:" + '\', ".mp3");
public static void main(String[] args) {
for (int i = 0; i < hello.getTotalNumberOfFiles(); i++) {
[Code] .....
The FileAccess class is just a class I made while trying to retrieve filenames from my hard drive.
As far as I can tell, it works correctly after I put the static keyword there. I just want to know why it is required in this particular code, considering it didn't need to do that when I made a simpler class while I was getting my feet wet at creating classes in Java.
JavaFX 2.0 :: How To Force The Row To Construct All Cells
May 20, 2014In other words in a table view with several editable columns, when a new row is added this row does not contain any column cells yet. Cells are added on demand once a column gains focus and starts editing. Is this the case? Is there any way to force the row to construct all cells eagerly?
View Replies View RelatedJavaFX 2.0 :: How To Force Layout Of Components
Mar 13, 2015I noticed that when building a UI programmatically in several steps the width/height of the Pane I use for layout is -1/-1. I read that this is the case until the actual rendering happens. Is there a way to force that earlier? Suppose I wanted to size other UI components (which are not visible initially) according to the size of another pane. How do I do that? Binding the properties does not do the job in the case that those components are not necessarily visible at the same time. Is there a trick to achieve that?
View Replies View RelatedJavaFX 2.0 :: Force Prism To Use OpenGL Version 4.1
Jun 25, 2014Setting VM argument prism.verbose=true gives some insight of what happens.
There i see an old openGL version is used on OSX 10.9:
Graphics Vendor: ATI Technologies Inc.
Renderer: AMD Radeon HD 6630M OpenGL Engine
Version: 2.1 ATI-1.22.28
How do i force prism to a newer openGL version?
Applets :: Won't Work Due To Security?
Feb 26, 2014I have a simple applet that doesn't stray outside the sandbox. It used to work fine before Java 7 but now it craps out with security warnings. It does nothing but play a game, it doesn't even save the state of the game. This is the applet, it's a very simple chess program.
The warnings and popups I'm getting are:
activate javaTM platform SE 7U?allow now?activation blocked by security settings - I never changed any security settings and as I said, this applet stays firmly in the sandbox so I can't see what the issue is.Viewing the java error window I see
Java Plug-in 10.51.2.13
Using JRE version 1.7.0_51-b13 Java HotSpot(TM) Client VM
User home directory = C:UsersMike
----------------------------------------------------
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
[code]....
why it shows the C:UsersMike directory in the above listing, there is no access to files etc.The applet plays fine if I run it in appletviewer.What do I need to do to make this simply work in anyone's browser? I have a similar problem with a (rather funky) Connect 4 program I wrote. It worked fine for years and then just stopped with the Java 7.
JSP :: Security Constraints When Connecting To Database?
Jan 29, 2015I know that Servlets are meant to do the JDBC tasks, JSP are only for displaying the final information forwarded by the Servlet.
JSP are Servlets too, but I heard an idea that it is safer to make database operations in a Servlet.
The idea is that I have a few JSP that use JSTL tags to retrieve some database information. By doing this I was concerned that this may be bad design, though I really wanted to get in fit with the JSTL tags.
Are there any security weaknesses if doing some JDBC stuff in a JSP, by using JSTL or plain Java code in <%...%>?
P.S. In my JSP I only retrieve data, not modifying it.
JSP :: Providing Security To Webapp Folder
May 12, 2014I have JSP application naming myProject ,which has been deployed in webapp folder in tomcat. I want to provide security for myProject folder. I mean, I want to protect it from copying by someone else. Is there any way to do the same. I tried by hiding the folder using one of hiding software, but when I do that, I was not able to access those files in web browser.
View Replies View RelatedJSP :: Using Filters With Declarative Security Login
Nov 13, 2014I've been building out a course lab project over the last few weeks, and at the time (with what we knew), it made sense to use a session level ResourceBundle to facilitate translations.
In order to validate if there is a session level ResourceBundle, I have a filter running (checking if the bundle exists, creating one if not, etc...).
The problem I now have is the final step of the project (the part most recently taught), is to add Declarative Security.
Of course, when that happens the login.jsp is called and the Filter doesn't run. It's not a problem for most scenarios, except for someone who bookmarks a link inside the secure part of the site. Then, the ResourceBundle doesn't exist and the login.jsp content that should be translated is "".
Is there a way to indicate via the web.xml that a specific Filter should be allowed before the login.jsp is displayed?
I imagine JSTL:FMT is probably the best solution, but we don't cover that until after the lab is due. I have a (messy) short-term solution of creating a temporary ResourceBundle in the login.jsp via a scriplet if the session scope ResourceBundle is null, but I was wondering if I missed something with the web.xml.
Security (encrypt / Decrypt) Across Machines
Feb 12, 2014I am using AES/CBC/PKCS5Padding algorithm to encrypt/decrypt, it works fine across machines, since i am not using a Facrtory to create the secret . I am using constant SecretKeySpec and iv for the ciphers. This of course heart the security , and doesn't prevent the "man of the middle" problem .
I saw that there are ways with key generation with MAC , and RSA symmetric encryption , but i am not sure how to implement it , and how to it depends on local certificates or files .
JavaFX 2.0 :: Security Exception When Executed Over Web
Oct 6, 2014I have an FX application which invokes a REST JSON webservice. It works perfect if I run it standalone. But if I try to run it over browser, it throws java security exception.
It also works fine in web if I comment some lines that invokes the webservice (code that calls the webservice using jackson.)
Java version used is JDK 1.7u67
IE plugin version : 7.0.670.1
Error log :
java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessDeclaredMembers")
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
[Code] .....
Jnlp File:
<?xml version="1.0" encoding="utf-8"?>
<jnlp spec="1.0" xmlns:jfx="http://javafx.com" href="uibuilder.jnlp">
<information>
<title>UI Builder</title>
<vendor>javafx.com</vendor>
<description>XEye UI Builder</description>
[Code] ....
JRE :: Changing Default Security Levels
Dec 21, 2014I have several Windows 7 Enterprise machines that have already been deployed via image and need to lower the security settings for use on internal web based applications.
Is there an easy way to manipulate the configuration (a file) so that I may simply make the changes by overwriting the current configuration settings instead of, having to go to each device, opening the Java console, and changing the security settings that way?
I have attempted to login as the machine administration, make the changes on the Java console with the hopes this configuration would have migrated to all user profiles that log into the PC. Is there a "public profile" configuration file I can change and if so, what should I do.
Client App To Consume Web Service With Security
Dec 15, 2014I need to write a simple client to access a WS. Things I can not do :
Modify the serverAdd external jars
The client will be part of a command line call and will run as a stand alone.
I've been searching all day and have found hundreds of vague, overly complex examples, mostly based on SOAPHandler (which tells me I need to install server components which I cannot do). I grasp the general requirements but am having difficulty figuring out how to add the security elements to the header.
What do I need to do to add the username and password tokens to the header?
This is where I am so far.
package findingLetter;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
import javax.xml.namespace.QName;
import javax.xml.soap.MessageFactory;
[Code] ....
Unable To Implement Alphanumeric Security Code
Apr 10, 2014I have been trying to implement a alphanumeric security code in JAVA. Here are my specifications:
1) Numbers and letters
2) There is user input
3) In the format of NNN-LL-NNNN where N=Numbers and L=UPPERCASE letters
4) If it is incorrect print out INVALID CODE
5) If it is correct print out VALID CODE
Here is what I have produced so far...
import java.util.*;
import java.io.*;
//Class Declaration
class WorkingWithStrings
{
//Main Method
public static void main(String[] args)
{
//Takes input from user
[Code]...
I have taking the approach of invoking a separate method that will check the validity of the security code. However I am having an issue with creating a statement that checks if the middle two characters of the security code are capital letters. This could possibly tie in with my understanding of strings.
Security Number Validation Based On Request
Jan 30, 2014I have to validate security number based on tHIS REQUEST
If the SECURITYNNUBER IS INVALID UNDER THE SECURITYNUMBER attribute,it must reject(Date & algorith). To override the normal validation,the subject must contain INVALIDSECURITYNUMBER. The incorrect ID number must still reflect in the SECURITYNUMBER attribute.
THE FIRST 6 DIGIT IS DATE
EXAMPLE 7701205334086
public boolean val_SECURITYNUMBER()
{
boolean flag = true;
String u_Securtynr = transactionFile.getS_securtynumber();
// 1. Invalid securty number if completed
if(!isBlank(u_Securtynr))
[Code] .....
Read File From LoginModule Running Under Security Manager
Nov 27, 2013I have followed the Java tutorial on JAAS Authentication and Authorization. All the sample code in the tutorials works fine also when running under a security manager. Now I am trying to modify the LoginModule class, so that it uses a password file to look up users and passwords, but as soon as I try to run the code under a security manager, I get a Security Exception. I suppose it has something to do with the code havent been granted any access to read the password file? So I tried to add this to the policy file:
grant codebase "file:./sample/module/-" {
permission java.io.FilePermission "sample/module/passwords.txt", "read";
};
It didn't do any difference. why I get this Security Exception?
The only difference from my code to the tutorial code, is that I have added the lines:
Scanner scanner = null;
try {
scanner = new Scanner(new File("src/sample/module/passwords.txt"));
} catch (FileNotFoundException e) {
e.printStackTrace();
}
to the login() method of the SampleLoginModule class...
Switching Security On In WTP Eclipse Plugin Causing Massive Errors
Aug 15, 2014I am working on an Eclipse based project that uses WTP Eclipse plugin. Since I have switched security on in that plugin (by checking "Enable Security" check box on) I'm having multiple problems. I get a stack of security errors - attached in this post. I also show my java.policy file. Because the of the mass exceptions I list only the top, although I have attached a docx file with full thing.
Here is my java.policy file:
grant codeBase "file:${catalina.base}/wtpwebapps/App/WEB-INF/lib/hibernate-core-4.3.5.Final.jar" {
permission java.util.PropertyPermission "*", "read, write";
};
grant codeBase "file:${catalina.home}/lib/catalina.jar" {
permission java.lang.RuntimePermission "*";
[Code] ....
Exceptions:
15/08/2014 10:12:43 PM org.apache.catalina.core.AprLifecycleListener init
INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path:
C:Javajdk1.6.0_33in;C:WINDOWSSunJavain;
C:WINDOWSsystem32;C:WINDOWS;
[Code] .....