What is the purpose of the java.rmi.server.useCodebaseOnly property?

Govind Seshadri

When the property java.rmi.server.useCodebaseOnly is set to true, then the JRE will load classes only from either a location specified by the CLASSPATH environment variable or the URL specified in the java.rmi.server.codebase property. This is an easy way of imposing additional security to the behaviour of RMIClassLoader.