United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: 7183263 Regression: crossdomain.xml with dtd doesn't work
7183263 : Regression: crossdomain.xml with dtd doesn't work

Details
Type:
Bug
Submit Date:
2012-07-11
Status:
Resolved
Updated Date:
2012-10-29
Project Name:
JDK
Resolved Date:
2012-07-25
Component:
deploy
OS:
windows_7,windows
Sub-Component:
deployment_toolkit
CPU:
x86
Priority:
P2
Resolution:
Fixed
Affected Versions:
6u33,7u5
Fixed Versions:
8

Related Reports
Backport:
JDK-8001773 - Regression: crossdomain.xml with dtd doesn't work
Backport:
JDK-2227076 - Regression: crossdomain.xml with dtd doesn't work
Backport:
JDK-2228280 - Regression: crossdomain.xml with dtd doesn't work
Relates:
JDK-7175548 - Regression: Fix 7110690 breaks crossdomain functionality for applets running on 6u33-b03 (FCS/GA)

Sub Tasks

Description
The issue is similar to 7175548 in case crossdomain.xml contains DTD (as it should). The example of such files are twitter.con and flickr.com
In the 07/16 7u6 Triage - Igor asked that we makre this as NMI and he will come back tomorrow with a recommendation.

Comments
SUGGESTED FIX

http://closedjdk.us.oracle.com/jdk8/deploy/deploy/rev/da5585bff9a4
2012-07-18 
EVALUATION

Work around fix is to disable use of DTD since security manager can't load DTD from 3rd party site (ref: http://www.isocra.com/2006/05/making-xerces-ignore-a-dtd/)
2012-07-18


Hardware and Software, Engineered to Work Together