Because the JVM runs in headless mode, Java methods requiring user input or output are disabled
Operations that could interfere with the operations of the server or other JVM tasks are not permitted
These java.lang.Thread methods are not permitted:
interrupt()
setPriority ()
setName()
enumerate()
setDaemon()
checkAccess()
getContextClassLoader()
setDefaultExceptionHandler()
setContextClassLoader()
getStackTrace()
getAllStarkTraces()
setDefaultUncaughtExceptionHandler()
stop()
destroy()
suspend()
resume()
Deprecated methods are allowed, but may be unsafe
countStackFrames()
These java.lang.ThreadGroup methods are not permitted:
getParent()
setDaemon()
setMaxPriority()
checkAccess()
enumerate()
interrupt()
stop()
destroy()
suspend()
resume()
Deprecated methods are allowed, but may be unsafe
allowThreadSuspension()
Security issues:
You can not override the existing SecurityManager or instantiate other class loaders.
The exit() methods in java.lang.System and java.lang.Runtime are not permitted.