xml-dev - re: examples of aelfred use in applets required

[David Megginson <david@megginson.com>]

James Powell writes:

 > I've been trying to use the small aelfred java parser.
 > 
 > I've had problems when using it in an applet. Netscape
 > gives out security errors due to loading the XML file
 > off of a webpage.

The default security model in most browsers allows an applet to open
TCP/IP connections only to the host from which it was loaded.  For
example, if your applet is at http://www.foo.com/javastuff/stuff.jar,
it will be able to load

  http://www.foo.com/docs/bar.xml

but *not*

  http://www.hack.com/documents/snarf.xml

I think that that's getting better in newer browsers, but I haven't
looked for a while.  The JDK plug-in from Sun might also help.

Look at the bright side -- at least there's no equivalent of Melissa
in the Java world, yet (imagine if hostile applets could start
connecting to arbitrary SMTP hosts).


All the best,


David

-- 
David Megginson                 david@megginson.com
           http://www.megginson.com/

xml-dev: A list for W3C XML Developers. To post, mailto:xml-dev@ic.ac.uk
Archived as: http://www.lists.ic.ac.uk/hypermail/xml-dev/ and on CD-ROM/ISBN 981-02-3594-1
To (un)subscribe, mailto:majordomo@ic.ac.uk the following message;
(un)subscribe xml-dev
To subscribe to the digests, mailto:majordomo@ic.ac.uk the following message;
subscribe xml-dev-digest
List coordinator, Henry Rzepa (mailto:rzepa@ic.ac.uk)