JNLP 被java安全阻止

我想在把JNLP内嵌到html页面中，在本地tomcat服务器上运行，控制面板中的例外站点已经改过，为什么仍然被java安全阻止呢？

html 代码

<html>

<body>

    <script src="https://www.java.com/js/deployJava.js"></script>
    <script>
        var attributes = {} ;
        var parameters = {jnlp_href: 'game.jnlp',jnlp_embedded:'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'} ;
        deployJava.runApplet(attributes, parameters, '1.7');
    </script>

</body>
<html>

jnlp

<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="1.0+" codebase="file://localhost/C:/Users/Administrator/Desktop/lqyjnlp">
    <information>
        <title>Game</title>
        <vendor>Game</vendor>

    </information>
      <security>
       <all-permissons/>
    </security>
    <resources>
        <!-- Application Resources -->
        <j2se version="1.7+"
            href="http://java.sun.com/products/autodl/j2se" />
        <jar href="Card3.jar" main="true" />

    </resources>
    <applet-desc 
         name="Dynamic Tree Demo Applet"
         main-class="MainTest"
         width="400"
         height="500">
     </applet-desc>
     <update check="background"/>
</jnlp>

jar已经签名并且检查过签名

jar的manifest

Manifest-Version: 1.0
Application-Name: Card Game
Permissions: all-permissons
Created-By: 1.7.0_40 (Oracle Corporation)
Main-Class: MainTest
Codebase: 127.0.0.1

Name: Card.class
SHA-256-Digest: C0mmndLFOcvB3Or0eUq45a79opI7q8a7xg97ykw7Stg=

Name: Deck.class
SHA-256-Digest: 4kvleZ87SC6uIpL6CiEFpIYyMu7B7OCeWW7pxAzLGFg=

Name: MainTest.class
SHA-256-Digest: y4IjMvSafZ/umVQF8prW2h6TJ0S+S4XlVhVmWHJQj/4=

Name: JBetCard.class
SHA-256-Digest: +l1YNANpFed84u2M8asoEGfX0OdgwosqsNbfQmbuXn4=

我已经在控制面板中的信任站点中加了以下站点：
http://java.sun.com/products/autodl/j2se
file://localhost/C:/Users/Administrator/Desktop/lqyjnlp
https://www.java.com/js/deployJava.js
http://127.0.0.1
http://127.0.0.1/lqyjnlp/index.html

https站点的证书不在信任列表？

【热门文章】