With 1.4.2_13 the manual regression test case for 5017051 no longer passes. The regression test can be found on SWAN at /net/nightsvr.sfbay/export3/jpse/regress.library/5017051.

The testcase essentially tests that if a cookie is set in the 401 (Unauthorized) response from a http server, that that cookie is send in the follow http request send to the server with the users credentials. This is no longer the case with 1.4.2_13.

The fix for 4845728 removes the code in sun.net.www.protocol.http.HttpURLConnection that sets the cookie when responding to a 401.