| | Secure Internet Programming: Java Security: From HotJava to Netscape and Beyond |
 | | Information servers can customize the presentation of their content with server-supplied code which executes inside the Web browser. |
 | | We examine the Java language and both the HotJava and Netscape browsers which support it, and find a significant number of flaws which compromise their security. |
 | | These flaws arise for several reasons, including implementation errors, unintended interactions between browser features, differences between the Java language and bytecode semantics, and weaknesses in the design of the language and the bytecode format. |
| www.cs.princeton.edu /sip/pub/secure96.html (260 words) |