JDK-2219511 : Ensure HttpURLConnection (and supporting APIs) don't expose HttpOnly cookies
  • Type: Backport
  • Backport of: JDK-7095980
  • Component: core-libs
  • Sub-Component: java.net
  • Priority: P2
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2012-01-09
  • Updated: 2012-01-31
  • Resolved: 2012-01-31
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7 JDK 8
7u4 b07Fixed 8Fixed
Description
see parent CR 7095980.
Comments
EVALUATION Changeset: d7450b1e436d Author: chegar Date: 2012-01-12 09:29 +0000 URL: http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/d7450b1e436d 7095980: Ensure HttpURLConnection (and supporting APIs) don't expose HttpOnly cookies Reviewed-by: michaelm ! src/share/classes/java/net/HttpCookie.java + src/share/classes/sun/misc/JavaNetHttpCookieAccess.java ! src/share/classes/sun/misc/SharedSecrets.java ! src/share/classes/sun/net/www/protocol/http/HttpURLConnection.java + test/sun/net/www/protocol/http/HttpOnly.java
13-01-2012
EVALUATION see parent CR 7095980.
09-01-2012