Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8041504

Caller-Allowable-Codebase update for 7u55/8u5

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P4 P4
    • 8u40
    • None
    • docs

      On the page http://docs.oracle.com/javase/8/docs/technotes/guides/jweb/security/manifest.html#caller_allowable
      Can we please change from:
      See Codebase Attribute for a description of the values that are allowed. If a stand-alone asterisk (*) is specified as the value for the Caller-Allowable-Codebase attribute, then calls from JavaScript code to your RIA show a security warning, and users have the choice to allow the call or block the call. An option to remember the choice is also provided, and if selected, the warning is no longer shown when the RIA is launched.

      To:
      See Codebase Attribute for a description of the values that are allowed. If a stand-alone asterisk (*) is specified as the value for the Caller-Allowable-Codebase attribute, or an asterisk on a top level domain such as (*.org), then calls from JavaScript code to your RIA show a security warning, and users have the choice to allow the call or block the call. An option to remember the choice is also provided, and if the user choses the option to remember the choice to run the RIA, no further warning messages are shown for the same RIA when run with JavaScript from the same source.

            jgordon Joni Gordon (Inactive)
            ecostlow Erik Costlow (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: