User guide

Security Measures for Portable-ORB
2-21
Notes on Creation and Operation of Java Applet
Be careful about the following points when creating and operating a Java applet that uses Portable-ORB.
About Authorization Settings
If Java applets in operation are given more authorization than necessary, some malicious applets
(including Javascript) may use it to cause problems on client machines, such as damaged files, leakage
of data in files, leakage of individual user information, and so on.
When you use Java applets, set only the minimum authorization that is required. Do not set
authorizations other than described in the following manuals:
• Distributed Application Development Guide (CORBA Service Edition) (provided by Enterprise
Edition and Standard Edition)
− "Java Programming Guide" - "Execution of CORBA Applications" - "Client Setup (Pre-installed
Java Clients)" - "Setting Permission for Java Libraries"
− "Java Programming Guide" - "Execution of CORBA Applications" - "Client Setup (Portable-
ORB)" - "Setting Permission for Java Libraries"
− "Java Programming Guide" - "Digital Signatures in Applets" - "Digital Signature Procedures" -
"policytool Command Setting (Supplements)"
About Errors and Exceptions
If information about an exception (stack trace) that occurred during operation of a Java applet is
displayed on the screen (in a text field of the applet, on the Java console, etc.), internal information
(internal structure) is leaked, which may be used by some malicious applets (including Javascript).
It is recommended not to display exception information (stack trace).