java socket安全策略文件

获取策略文件的Java服务器端代码

import java.io.BufferedReader;
import java.io.BufferedWriter;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.net.ServerSocket;
import java.net.Socket;

public class SecurityXMLServer implements Runnable {

private ServerSocket server;
private BufferedReader reader;
private BufferedWriter writer;
private String xml;

public SecurityXMLServer()
{
String path = "policyfile文件路径";
//此处的换成相应的读取xml文档的方式如dom或sax

//xml = readFile(path, "UTF-8");
/**
注意此处xml文件的内容，为纯字符串，没有xml文档的版本号
*/
xml="<cross-domain-policy> "
+"<allow-access-from domain=/"*/" to-ports=/"1025-9999/"/>"
+"</cross-domain-policy> ";
System.out.println("policyfile文件路径: " + path);
System.out.println(xml);

//启动843端口
createServerSocket(843);
new Thread(this).start();
}

//启动服务器
private void createServerSocket(int port)
{
try {
server = new ServerSocket(port);
System.out.println("服务监听端口：" + port);
} catch (IOException e) {
System.exit(1);
}
}

//启动服务器线程
public void run()
{
while (true) {
Socket client = null;
try {
//接收客户端的连接
client = server.accept();

InputStreamReader input = new InputStreamReader(client.getInputStream(), "UTF-8");
reader = new BufferedReader(input);
OutputStreamWriter output = new OutputStreamWriter(client.getOutputStream(), "UTF-8");
writer = new BufferedWriter(output);

//读取客户端发送的数据
StringBuilder data = new StringBuilder();
int c = 0;
while ((c = reader.read()) != -1)
{
if (c != '/0')
data.append((char) c);
else
break;
}
String info = data.toString();
System.out.println("输入的请求: " + info);

//接收到客户端的请求之后，将策略文件发送出去
if(info.indexOf("<policy-file-request/>") >=0)
{
writer.write(xml + "/0");
writer.flush();
System.out.println("将安全策略文件发送至: " + client.getInetAddress());
}
else
{
writer.write("请求无法识别/0");
writer.flush();
System.out.println("请求无法识别: "+client.getInetAddress());
}
client.close();
} catch (Exception e) {
e.printStackTrace();
try {
//发现异常关闭连接
if (client != null) {
client.close();
client = null;
}
} catch (IOException ex) {
ex.printStackTrace();
} finally {
//调用垃圾收集方法
System.gc();
}
}
}
}

//测试主函数
public static void main(String[] args)
{
new SecurityXMLServer();
}
}

针对Socket的策略文件

<cross-domain-policy>
<allow-access-from domain="*" to-ports="507" />
<allow-access-from domain="*.example.com" to-ports="507,516" />
<allow-access-from domain="*.example2.com" to-ports="516-523" />
<allow-access-from domain="www.example2.com" to-ports="507,516-523" />
<allow-access-from domain="www.example3.com" to-ports="*" />
</cross-domain-policy>

http://www.cnblogs.com/pelephone/articles/security-2048-java-socket-flash.html