Security Issues
Most servers allow the server administrator to associate different levels of “trust” to servlets, usually depending on where they came from. The levels usually control the access to the file system and networking.
- Note that a fully trusted servlet can even issue System.exit(), stopping the web server.
Servers may also allow Access Control Lists to be created which can allow different users of groups of users access to some web pages (or not).