disable bytecode verification in java web start ap

2020-04-18 08:27发布

问题:

I have a java web start application and i need to disable bytecode verification from within the jnlp file.

This can be done easily by setting JAVAWS_VM_ARGS="-noverify" or by setting -Xverify:none but the documentation here says that web start does not support adding these arguments in jnlp file.

I tried this :

<j2se version="1.6+" java-vm-args="-noverify -showversion -verbose" >

under resources tag but it skips -noverify and takes the other two.

Any help is appreciated.

回答1:

... but the documentation here says that web start does not support adding these arguments in jnlp file.

And rightly so, IMO. If you can disable bytecode verification, you can break JVM type-safety, and defeat the JNLP security sandbox.


If you have to disable bytecode verification to get your application to run, there is something seriously wrong with it. My suggestion is to fix the problem that is causing bytecode verification to fail rather than turning it off.