我想在把JNLP内嵌到html页面中 ，在本地tomcat服务器上运行， 控制面板中的例外站点已经改过， 为什么仍然被java安全阻止呢？
html 代码
<html>
<body>
<script src="https://www.java.com/js/deployJava.js"></script>
<script>
var attributes = {} ;
var parameters = {jnlp_href: 'game.jnlp',jnlp_embedded:'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'} ;
deployJava.runApplet(attributes, parameters, '1.7');
</script>
</body>
<html>jnlp
<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="1.0+" codebase="file://localhost/C:/Users/Administrator/Desktop/lqyjnlp">
<information>
<title>Game</title>
<vendor>Game</vendor>
</information>
<security>
<all-permissons/>
</security>
<resources>
<!-- Application Resources -->
<j2se version="1.7+"
href="http://java.sun.com/products/autodl/j2se" />
<jar href="Card3.jar" main="true" />
</resources>
<applet-desc
name="Dynamic Tree Demo Applet"
main-class="MainTest"
width="400"
height="500">
</applet-desc>
<update check="background"/>
</jnlp> jar已经签名并且检查过签名
jar的manifest
Manifest-Version: 1.0
Application-Name: Card Game
Permissions: all-permissons
Created-By: 1.7.0_40 (Oracle Corporation)
Main-Class: MainTest
Codebase: 127.0.0.1
Name: Card.class
SHA-256-Digest: C0mmndLFOcvB3Or0eUq45a79opI7q8a7xg97ykw7Stg=
Name: Deck.class
SHA-256-Digest: 4kvleZ87SC6uIpL6CiEFpIYyMu7B7OCeWW7pxAzLGFg=
Name: MainTest.class
SHA-256-Digest: y4IjMvSafZ/umVQF8prW2h6TJ0S+S4XlVhVmWHJQj/4=
Name: JBetCard.class
SHA-256-Digest: +l1YNANpFed84u2M8asoEGfX0OdgwosqsNbfQmbuXn4=
我已经在控制面板中的信任站点中加了以下站点：http://java.sun.com/products/autodl/j2sefile://localhost/C:/Users/Administrator/Desktop/lqyjnlphttps://www.java.com/js/deployJava.jshttp://127.0.0.1http://127.0.0.1/lqyjnlp/index.html
https網站的憑證不在信任清單？