Re: What is the difference between Java JRE 5.x and 6.x (1.5.x / 1.6.x) ???

"Arne Vajhøj" <arne@xxxxxxxxxx> wrote in message
news:494702c4$0$90273$14726298@xxxxxxxxxxxxxxxxxx
Arved Sandstrom wrote:
"Arne Vajhøj" <arne@xxxxxxxxxx> wrote in message
news:49459376$0$90271$14726298@xxxxxxxxxxxxxxxxxx
Arved Sandstrom wrote:
[ SNIP ]
I don't know if it was possible before in a Java applet to select JRE
version, but it is now (I think as of SE 6 Update 10).
Just x.y.z or x.y.z update w ?

You can get as specific as update. From
http://java.sun.com/javase/6/webnotes/6u10/plugin2/version-selection/index.html:
******************************
The new Java Plug-In provides a new platform- and browser-independent
mechanism for selecting a JRE version upon which to launch an applet: the
java_version applet parameter. This new parameter supports:

a.. Selection of a particular JRE version ("1.5.0_11")
b.. Selection of a particular JRE family ("1.5*")
c.. Selection of a particular JRE family or later ("1.5+")

In which case the original poster should worry.

Fully updated with all x.y.z version should mean that
it is safe to allow an applet to pick x.y.z version.

But fully updated with all x.y.z versions (have latest w)
but not having deleted the old w-1 mean that it is not safe
to allow an applet to pick x.y.z update w.

Arne

Except that (from the same link):

**************************************
When considering a request to launch an applet on a specific JRE version
(for example, a particular update release like "1.5.0_11"):

1.. The list of available JREs is consulted. If there is an exact match of
the version string, that JRE version is selected. Otherwise, if there are
one or more installed JREs in the same family, the latest version is
selected. Otherwise, the latest available JRE on the machine is selected.
2.. The selected JRE version is compared against the security baseline for
the family. If it is equal to or more recent than that version, no further
prompting is done and the applet is launched.
3.. Otherwise, the code for the applet is downloaded in a JVM instance of
the selected JRE version. If the applet is signed and the user accepts the
security dialog for the applet (or the code source has already been
trusted), no further prompting is done and the applet is launched.
4.. Otherwise, we are dealing with an unsigned applet on an "older" JRE
version. A dialog box is presented indicating that this applet is requesting
to run on top of an older JRE release, and asks the user whether he or she
wants to allow it to. If the user clicks "yes", the applet is launched. If
the user clicks "no", the applet is re-launched on top of the latest
available JRE version.

When considering a request to launch an applet on a particular family, the
most recent JRE from that family will be selected and the above steps
starting from (2) will be followed.

When considering a request to launch an applet on a particular family or any
later family, the latest available JRE will be used to launch the applet.

**************************************
So in your example it's quite unlikely that the applet code will get
automatically launched without the user having something to say about it.

AHS


.

Relevant Pages