从Java脚本安全性问题调用签名的Java Applet

Question

I have a signed Java Applet that has the following method:

public Boolean SaveToFile(String text)
{
File file = new File("c:\\myFile.txt");

// if file doesnt exists, then create it 
if ( ! file.exists( ) )
{
    file.createNewFile( );
}

file.setReadable(true);
file.setWritable(true);
FileWriter fw = new FileWriter( file.getAbsoluteFile( ) );
BufferedWriter bw = new BufferedWriter( fw );
bw.write( text );
bw.close( );
return true;

}

When i call this method from a button inside the applet, it creates the file without any problems.

The problem is when i call this method from java script, i have the following exception:

access denied (java.io.FilePermission c:\myFile.txt read)

How can i fix this exception?

Answer 1

Using AccessController fixed the issue:

    public Boolean SaveToFile(String text)
    {
    final String textEx = text;
    return AccessController.doPrivileged(new PrivilegedAction<Boolean>() {

            @Override
            public Boolean run()
            {

    File file = new File("c:\\myFile.txt");

    // if file doesnt exists, then create it 
    if ( ! file.exists( ) )
    {
        file.createNewFile( );
    }

    file.setReadable(true);
    file.setWritable(true);
    FileWriter fw = new FileWriter( file.getAbsoluteFile( ) );
    BufferedWriter bw = new BufferedWriter( fw );
    bw.write( textEx );
    bw.close( );
    return true;
    } }
 });