For the japplet, you can not be restricted, but pay attention to the version of the client's JRE, when the version is above 1.4 or more!
For how to add Swing components to the applet:
1) Define component parameters with an external HTML file and use it in the applet. This approach is only used in a relatively old version.
2) Use the japplet to support the CONTAINER GETCONTENTPANE for writing interfaces. Like the general Swing Application, you can use the Swing package, and the contents of other packages.
As for the security of Applet:
1) Generally in the test environment, all applets without non-network abnormalities in compilation and run can be run, and you can access any sites, including sites on the Internet.
2) Execute the local (native) website through the local (native) website to access the local (native) site, and cannot access the site. It is not
Access the site on the Internet.
3) When Applet is deployed on a site. When the client (including the local machine with the site) browser requests it, it cannot access external sites, nor
Access this site.
If you want to access it in any client browser, you can only use the authentication mechanism.