What is meant by “Sandbox Model” as in case of an applet?
Applets are designed to run in a sandbox. This means they don’t get access to the local machine and they can only talk to the server they came from.An unsigned applet cannot connect to a server other than the server it was downloaded from. There are also similar restrictions about the port used.An applet cannot receive incoming connections. An applet is not allowed to send out broadcast UDP messages.Applets are not allowed to go rooting around in the local file systems of their executing hosts.Applets use a ClassLoader inside the browser to do the download, and both the major browsers don’t consider the local CLASSPATH for code, because they don’t want to pick up code lying about on the user’s hard drive — security risk.If you want to break out of that sandbox, you need to establish a trusted relationship with the applet in which case the applet can behave similar to an application.
