United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: 6732753 HTTPS redirect does not work in Java Web Start
6732753 : HTTPS redirect does not work in Java Web Start

Details
Type:
Enhancement
Submit Date:
2008-08-01
Status:
Open
Updated Date:
2012-01-03
Project Name:
JDK
Resolved Date:
Component:
deploy
OS:
generic,windows_xp,windows_7
Sub-Component:
webstart
CPU:
x86,generic
Priority:
P3
Resolution:
Unresolved
Affected Versions:
6u10,7
Targeted Versions:
7-pool

Related Reports

Sub Tasks

Description
customer claim HTTPS redirect does not work in mulitple version of java web start.

Comments
EVALUATION

I don't think there is any security concern by allowing redirect from http to https, by looking our source code, we prohibit redirect from http to https, the implementation is in HttpURLConnection class since JRE 1.2, therefore this is not a regression and we should consider to change this behavior in JDK7.
2010-08-12


Hardware and Software, Engineered to Work Together