FULL PRODUCT VERSION :
java version "1.6.0_14-ea"
Java(TM) SE Runtime Environment (build 1.6.0_14-ea-b06)
Java HotSpot(TM) Client VM (build 14.0-b15, mixed mode, sharing)

ADDITIONAL OS VERSION INFORMATION :
Windows XP [versie 5.1.2600]


A DESCRIPTION OF THE PROBLEM :
crossdomain.xml broken in Java 6 update 14 b06

For example, this demo is not working, but it is doing fine in the previous update version (update 13): http://weblogs.java.net/blog/joshy/archive/2008/05/java_doodle_cro.html



STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Start the applet at this location:
http://weblogs.java.net/blog/joshy/archive/2008/05/java_doodle_cro.html


EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Images displayed with no errors in the Java console.
ACTUAL -
No images visible and a stacktrace in the Java console window.

ERROR MESSAGES/STACK TRACES THAT OCCUR :
Validating http://projects.joshy.org/demos/PhotoStrip/unsigned/PhotoStrip.jar , version null...
init
image = http://farm4.static.flickr.com/3223/3137709120_877ea012cb_m.jpg
image = http://farm4.static.flickr.com/3215/3136881273_bd8ca6050c_m.jpg
image = http://farm4.static.flickr.com/3236/3136880405_4ef4c12af0_m.jpg
image = http://farm4.static.flickr.com/3226/3136879481_dddf521158_m.jpg
image = http://farm4.static.flickr.com/3089/3136878411_9b40c8ceb7_m.jpg
image = http://farm4.static.flickr.com/3205/3136877583_d3cfeb8cf3_m.jpg
image = http://farm4.static.flickr.com/3214/3136876503_6f14aa13d1_m.jpg
image = http://farm4.static.flickr.com/3286/3137702640_0f88a4c8b7_m.jpg
image = http://farm4.static.flickr.com/3242/3137701730_eca54c7904_m.jpg
image = http://farm4.static.flickr.com/3230/3137700740_e12a502d57_m.jpg
image = http://farm4.static.flickr.com/3114/3136872567_dd1959d2fa_m.jpg
image = http://farm4.static.flickr.com/3260/3137698986_4567a981fc_m.jpg
image = http://farm4.static.flickr.com/3213/3136870591_79952ed582_m.jpg
image = http://farm4.static.flickr.com/3109/3136869611_2e5c5ecebc_m.jpg
image = http://farm4.static.flickr.com/3230/3136868659_4fc88bf3e2_m.jpg
image = http://farm4.static.flickr.com/3115/3137695322_03d7e56979_m.jpg
image = http://farm4.static.flickr.com/3160/3136866993_a2dc7e9267_m.jpg
image = http://farm4.static.flickr.com/3262/3137693356_a3af002540_m.jpg
image = http://farm4.static.flickr.com/3087/3137692328_7c7cc31c1f_m.jpg
image = http://farm4.static.flickr.com/3295/3136864029_f7c2150f35_m.jpg
Exception in thread "Thread-15" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)
Exception in thread "Thread-17" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)
Exception in thread "Thread-14" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)
Exception in thread "Thread-12" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)
Exception in thread "Thread-16" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)
Exception in thread "Thread-18" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)
Exception in thread "Thread-11" java.security.AccessControlException: access denied (java.net.SocketPermission farm4.static.flickr.com:80 connect,resolve)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkConnect(Unknown Source)
at sun.plugin2.applet.Applet2SecurityManager.checkConnect(Unknown Source)
at sun.net.www.http.HttpClient.openServer(Unknown Source)
at sun.net.www.http.HttpClient.<init>(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.http.HttpClient.New(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
at java.net.URL.openStream(Unknown Source)
at javax.imageio.ImageIO.read(Unknown Source)
at photostrip.PhotoResource$2.run(PhotoResource.java:82)
at java.lang.Thread.run(Unknown Source)

REPRODUCIBILITY :
This bug can be reproduced always.

CUSTOMER SUBMITTED WORKAROUND :
Sign the application, but that is not an option.

Release Regression From : 6u13
The above release value was the last known release where this
bug was not reproducible. Since then there has been a regression.