United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
JDK-6732753 : HTTPS redirect does not work in Java Web Start

Details
Type:
Enhancement
Submit Date:
2008-08-01
Status:
Resolved
Updated Date:
2015-02-05
Project Name:
JDK
Resolved Date:
2015-02-05
Component:
deploy
OS:
generic,windows_xp,windows_7
Sub-Component:
webstart
CPU:
generic,x86
Priority:
P3
Resolution:
Cannot Reproduce
Affected Versions:
6u10,7
Fixed Versions:

Related Reports

Sub Tasks

Description
customer claim HTTPS redirect does not work in mulitple version of java web start.

                                    

Comments
EVALUATION

I don't think there is any security concern by allowing redirect from http to https, by looking our source code, we prohibit redirect from http to https, the implementation is in HttpURLConnection class since JRE 1.2, therefore this is not a regression and we should consider to change this behavior in JDK7.
                                     
2010-08-12



Hardware and Software, Engineered to Work Together