Java further enhances security, thus reducing external attacks on user systems. Starting from Java 7 Update 5 1, Java does not allow users to run unsigned, self-signed (not signed by a trusted authority) or applications that lack permission attributes.

Risks involved in running an application

Unsigned application

If an application does not have a certificate (such as an unsigned application) or lacks application name and publisher information, it will be blocked by default. Running this type of application may be unsafe and risky.

Self-signed application (certificate is not from a trusted certification authority)

By default, applications with self-signed certificates are blocked. This type of application has the highest level of risk because the publisher is uncertain and the application may be authorized to access personal data on your computer.

Jar file without permission attribute

The permission property verifies whether the application requests the permission level specified for the developer. If this attribute does not exist, an attacker may attack the user by redeploying the application signed with the original certificate and running it with different permission levels.

solution

The application you are running is blocked because it does not meet the security guidelines implemented in Java 7 Update 5 1.

Please contact the developer or publisher of this application to let them know that this application has been blocked. You can provide them with links to information about implementing security practices in application code.

Security manifest attribute of JAR file

Java SE security document

Security coding standard of Java programming language

solution

It is strongly recommended not to run these types of applications. However, if you still want to run these applications, please only run them after understanding the risks and impacts.

As a workaround, you can use the exception site list function to run applications blocked by security settings. By adding the URL of a blocked application to the list of exception sites, you can allow the application to run and display some warnings.