3. Deploying XXE using Java™ Web Start

This section assumes that the reader knows what is JavaWeb Start.

Important

XXE requires <security><all-permissions/></security> in order to run. This implies that all .jar files must be digitally signed using the same certificate. Fortunately, the deploywebstart command-line utility makes this a snap. See below.