Security

Security for the Web runtime begins with the following provisions:

• The "acuauth.txt" file contains a list of directories where COBOL applications are authorized to create or delete files and subdirectories.
• Calls to certain library routines are disallowed to prevent potentially damaging operations.
• Warning messages appear the first time users launch the Web runtime.
• We supply the Web runtime with a digital signature indicating that Micro Focus verifies the content. This enables users to run the control using a medium security setting on their Internet Explorer browser.

Since we distribute the Web runtime via the Internet, it is packaged as a signed Cabinet (CAB) file. This ensures your users that the code is safe. The CAB file contains a compressed version of the control, with information that tells Internet Explorer how to install it.

Although we have built in a number of security features, the Web runtime allows COBOL programs to be executed on target machines. Because we have no control over the programs that are executed by the Web runtime, we cannot fully guarantee that they are safe.