Based on the comment/screenshot attached in the resolved bug:
https://bugs.openjdk.java.net/browse/JDK-8027594

the text at the bottom of the exception site list should be changed to:
"FILE or HTTP protocols are considered a security risk.
We recommended using HTTPS sites where available"

but in deploy PIT 8/7u that contains the fix for JDK-8027594, the above text is still :
"Sites that use FILE or HTTP protocols (as indicated) are considered a security risk.
We recommended using HTTPS sites where available"


*** Tested JRE 8 / 7u PIT builds:***
    http://rehudson.us.oracle.com/nightlyws/jdk8-deploy/b255_2013-11-05-0301_664/bundles/ (build #664)
    http://rehudson.us.oracle.com:8080/hudson/job/deploy-1-prebuild/ws/bundles/ (build #609)