I'm trying to use Java Web Start to startup a java app from a local web page but getting security errors. Here is the jnlp file:
<jnlp spec="1.0+"
href="dynamictree_webstart_no_codebase.jnlp">
<information>
<title>Dynamic Tree Demo No Codebase</title>
<vendor>Dynamic Team</vendor>
</information>
<resources>
<!-- Application Resources -->
<j2se version="1.7+"
href="http://java.sun.com/products/autodl/j2se"/>
<jar href="DynamicTreeDemo.jar" main="true" />
</resources>
<security>
<all-permissions/>
</security>
<application-desc
name="Dynamic Tree Demo Application"
main-class="webstartComponentArch.DynamicTreeApplication">
</application-desc>
<update check="background"/>
</jnlp>
If I use the following url:
file:///C:/Users/Greg/Desktop/JavaWebStartExamples/webstart_ComponentArch_DynamicTreeDemo/src/JavaWebStartAppPage_No_Codebase.html
Then I get a dialog with "Application Blocked by Java Security, Your security settings have blocked a local application from running"
So then I add "file://desktop-60nl2pl" to the Trusted Sites area in Chrome and uncheck "Require server verification (https:) for all sites in this zone" and change the url to the following:
"file://desktop-60nl2pl/Users/Greg/Desktop/JavaWebStartExamples/webstart_ComponentArch_DynamicTreeDemo/src/JavaWebStartAppPage_No_Codebase.html"
Then a dialog pops up saying "Unable to launch the application." Clicking the Details button reveals "java.lang.IllegalArgumentException: URI has an authority component at java.io.File.(Unknown Source) at com.sun.javaws.jnl.XMLFormat.setSourceURL(Unknown Source) ".
I've signed the jar with a self-signed crt but that apparently was not enough. I've read up on this problem and one possible solution seems to be that now it needs to be signed by a trusted CA cert. Really? Just for testing on my local computer? Surely there is another way?
EDIT1: Adding in the html code by request
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html lang="en-US">
<head>
<title>Dynamic Tree Java Web Start Application - Deployed Without Codebase</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
</head>
<body>
<h1>Dynamic Tree Java Web Start Application Demo - Deployed Without Codebase </h1>
<script src="https://www.java.com/js/deployJava.js"></script>
<h2>Java Web Start application deployed by using the <code>launchWebStartApplication</code> function</h2>
<p><a href="javascript:deployJava.launchWebStartApplication('dynamictree_webstart_no_codebase.jnlp');">Launch Dynamic Tree Demo application</a></p>
<br/>
<hr/>
<br/>
<h2>Java Web Start application deployed by using the <code>createWebStartLaunchButtonEx</code> function</h2>
<script>
var jnlpFile = "dynamictree_webstart_no_codebase.jnlp";
deployJava.createWebStartLaunchButtonEx(jnlpFile);
</script>
<noscript>JavaScript is required for this page.</noscript>
</body>
</html>
EDIT2: Here is the web page and Blocked Error screenshots:
I click Open Java Web Launcher and then see this Blocked error:

If I double click DynamicTreeDemo.jar, the app comes up ok. I just won't launch from the web page.
