compact1, compact2, compact3

java.net

Class NetPermission

java.lang.Object

java.security.Permission

java.security.BasicPermission

java.net.NetPermission

All Implemented Interfaces:

Serializable， Guard

public final class NetPermission
extends BasicPermission

此类用于各种网络权限。一个netpermission包含一个名字（也被称为“目标名称”）但没有行为列表；你可以有命名的许可，或者你不

目标名称是网络权限的名称（见下文）。命名约定遵循分层属性命名约定。另外，星号可以出现在名称的末尾，下面一个“。”，或本身，意味着一个通配符匹配。例如：“foo。*”、“*”表示一个通配符匹配，而“foo”和“一个”不。

下表列出了所有可能的netpermission目标名称，并为每个提供了一个描述什么权限允许和给代码权限的风险的讨论。

Permission Target Name	What the Permission Allows	Risks of Allowing this Permission
allowHttpTrace	The ability to use the HTTP TRACE method in HttpURLConnection.	Malicious code using HTTP TRACE could get access to security sensitive information in the HTTP headers (such as cookies) that it might not otherwise have access to.
getCookieHandler	The ability to get the cookie handler that processes highly security sensitive cookie information for an Http session.	Malicious code can get a cookie handler to obtain access to highly security sensitive cookie information. Some web servers use cookies to save user private information such as access control information, or to track user browsing habit.
getNetworkInformation	The ability to retrieve all information about local network interfaces.	Malicious code can read information about network hardware such as MAC addresses, which could be used to construct local IPv6 addresses.
getProxySelector	The ability to get the proxy selector used to make decisions on which proxies to use when making network connections.	Malicious code can get a ProxySelector to discover proxy hosts and ports on internal networks, which could then become targets for attack.
getResponseCache	The ability to get the response cache that provides access to a local response cache.	Malicious code getting access to the local response cache could access security sensitive information.
requestPasswordAuthentication	The ability to ask the authenticator registered with the system for a password	Malicious code may steal this password.
setCookieHandler	The ability to set the cookie handler that processes highly security sensitive cookie information for an Http session.	Malicious code can set a cookie handler to obtain access to highly security sensitive cookie information. Some web servers use cookies to save user private information such as access control information, or to track user browsing habit.
setDefaultAuthenticator	The ability to set the way authentication information is retrieved when a proxy or HTTP server asks for authentication	Malicious code can set an authenticator that monitors and steals user authentication input as it retrieves the input from the user.
setProxySelector	The ability to set the proxy selector used to make decisions on which proxies to use when making network connections.	Malicious code can set a ProxySelector that directs network traffic to an arbitrary network host.
setResponseCache	The ability to set the response cache that provides access to a local response cache.	Malicious code getting access to the local response cache could access security sensitive information, or create false entries in the response cache.
specifyStreamHandler	The ability to specify a stream handler when constructing a URL	Malicious code may create a URL with resources that it would normally not have access to (like file:/foo/fum/), specifying a stream handler that gets the actual bytes from someplace it does have access to. Thus it might be able to trick the system into creating a ProtectionDomain/CodeSource for a class even though that class really didn't come from that location.

另请参见：

BasicPermission， Permission， Permissions， PermissionCollection， SecurityManager， Serialized Form

构造方法摘要

构造方法

Constructor and Description
NetPermission(String name) 创建具有指定名称的新netpermission。
NetPermission(String name, String actions) 创建一个新的具有指定名称的netpermission对象。

方法摘要

Methods inherited from class java.security.BasicPermission

equals, getActions, hashCode, implies, newPermissionCollection

Methods inherited from class java.security.Permission

checkGuard, getName, toString

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

NetPermission

public NetPermission(String name)

创建具有指定名称的新netpermission。这个名字的netpermission象征性的名称，如“setdefaultauthenticator”等。星号可以出现在名称的末尾，下面一个“。”，或本身，意味着一个通配符匹配。

参数

name的netpermission名称。

异常

如果是 null name NullPointerException。

IllegalArgumentException -如果 name是空的。

NetPermission

public NetPermission(String name,
                     String actions)

创建一个新的具有指定名称的netpermission对象。这个名字的netpermission符号的名字，和动作字符串是当前未使用的，应为。

参数

name的netpermission名称。

actions -应该是空的。

异常

如果是 null name NullPointerException。

IllegalArgumentException -如果 name是空的。