How do I control when an untrusted applet or application runs in my web browser?
This article applies to:
Java 7u10 introduces the ability to manage when and how untrusted Java applications (i.e. an application that is digitally signed by an unknown publisher, or a certificate that has not been issued by a trusted Certificate Authority) will run if they are included on a web page. Setting the security level within the Java Control Panel will determine whether
See the Exception Site List FAQ for more info.
Setting the Security levels through the Java Control Panel
Security levels in the Java Control Panel
Very HighThis is the most restrictive security level setting. All the applications that are signed with a valid certificate and include the Permissions attribute in the manifest for the main JAR file are allowed to run with security prompts. All other applications are blocked.
HighThis is the minimum recommended (and default) security level setting. Applications that are signed with a valid or expired certificate and include the Permissions attribute in the manifest for the main JAR file are allowed to run with security prompts. Applications are also allowed to run with security prompts when the revocation status of the certificate cannot be checked. All other applications are blocked.
MediumOnly unsigned applications that request all permissions are blocked. All other applications are allowed to run with security prompts. Selecting the Medium security level is not recommended and will make your computer more vulnerable should you run a malicious application.
Use search to find the Control Panel
Mac OS X 10.7.3 and above
We think you might also be interested in: