Java Security FAQ: Create a new class loader
Here's an applet that tries to create a new class loader:
and here's the source.
Conclusion:
Applets can't create or extend the system class loaders, unless that
applet is loaded from a directory on your CLASSPATH.
Back to the Java Security FAQ