
possibly malicious applications cannot gain access to system resources.The default
behavior of applets is still the same as the old sandbox. Applets are not able to do any
restricted operations; only now, the applet can request additional privileges.
All downloaded, unsigned code is assumed untrusted.The JVM can allow
untrusted applications to execute within the sandbox, without the fear of corrup-
tion. However, the sandbox alone can be too inflexible with this all-or-nothing solu-
tion. With Java protected domains, a developer can extend the sandbox into the file
system, thereby offering a powerful and independently flexible facility.This extension ...