FULL PRODUCT VERSION :
java version "9-ea"
Java(TM) SE Runtime Environment (build 9-ea+161)
Java HotSpot(TM) 64-Bit Server VM (build 9-ea+161, mixed mode)

ADDITIONAL OS VERSION INFORMATION :
Microsoft Windows [Versione 6.1.7601]

A DESCRIPTION OF THE PROBLEM :
When the jnlp is produced dynamically with no href in jnlp tag, the Security prompt about application execution appears each time despite of tsflag checked (Don't show this message again ...).

I am aware that is due to a change introduced starting with update 8u112:

https://bugs.openjdk.java.net/browse/JDK-8157337

and some of you probably consider this behaviour as "NOT A BUG".

Unfortunally applets "are dying" and as suggested from Oracle we're using java webstart to substitute them.
For applets you can specify arguments and so you can do in java webstart.
The problem is that changing the arguments implies to have a different jnlp and the new approach considers this situation as a "different application".

Would it be possible to not include the 'argument' tags in the hashing of the jnlp file so that, an application coming from the same host with the same jnlp (excluding arguments) and regular signed with valid certificate, would be considered for security prompt once if the checkbox is flagged?

Please consider that it seems to be an Issue for many people using java webstart with changing arguments.

Thank you for your efforts.

Stefano Prosperi


REGRESSION. Last worked in version 8u111


REPRODUCIBILITY :
This bug can be reproduced always.