JDK-6732753 : HTTPS redirect does not work in Java Web Start
  • Type: Enhancement
  • Component: deploy
  • Sub-Component: webstart
  • Affected Version: 6u10,7
  • Priority: P3
  • Status: Resolved
  • Resolution: Cannot Reproduce
  • OS: generic,windows_xp,windows_7
  • CPU: generic,x86
  • Submitted: 2008-08-01
  • Updated: 2015-02-05
  • Resolved: 2015-02-05
Description
customer claim HTTPS redirect does not work in mulitple version of java web start.
Comments
EVALUATION I don't think there is any security concern by allowing redirect from http to https, by looking our source code, we prohibit redirect from http to https, the implementation is in HttpURLConnection class since JRE 1.2, therefore this is not a regression and we should consider to change this behavior in JDK7.
12-08-2010