2 Replies Latest reply on Aug 4, 2012 10:44 AM by 99443

    Invoking OS process from webstart ...


      I managed to invoke a 'desktop process' from a webstart based app. I used the Runtime object as below ...

      ------------------ code snippet ----------------------------
      Runtime runtime = Runtime.getRuntime();
      String desktopProgram = "path/foo.exe";
      Process process = runtime.exec(desktopProgram);

      ------------------ code snippet ----------------------------

      It works. But it gives me a strange feeling w.r.t security. Since webstart/jnlp is extremely carefull w.r.t allowing webstart based programs in accessing any file natively and forces developers to use the specific JNLP api, I am wondering on the safety repurcissions of the approach shown above.

      Anyone care to comment ?.