2 Replies Latest reply: Aug 4, 2012 5:44 AM by 99443 RSS

    Invoking OS process from webstart ...

    99443
      Hi,

      I managed to invoke a 'desktop process' from a webstart based app. I used the Runtime object as below ...

      ------------------ code snippet ----------------------------
      Runtime runtime = Runtime.getRuntime();
      String desktopProgram = "path/foo.exe";
      Process process = runtime.exec(desktopProgram);

      ------------------ code snippet ----------------------------

      It works. But it gives me a strange feeling w.r.t security. Since webstart/jnlp is extremely carefull w.r.t allowing webstart based programs in accessing any file natively and forces developers to use the specific JNLP api, I am wondering on the safety repurcissions of the approach shown above.

      Anyone care to comment ?.

      /rk