basic: XMLParser with _source:
<?xml version="1.0" encoding="utf-8"?>
<jnlp spec="1.0" xmlns:jfx="http://javafx.com" href="CodebaseTest.jnlp">
  <information>
    <title>CodebaseTest</title>
    <vendor>Deployment SQE</vendor>
    <description>Sample JavaFX 2.0 application.</description>
    <offline-allowed/>
  </information>
  <resources>
    <jfx:javafx-runtime version="2.2+" href="http://javadl.sun.com/webapps/download/GetFile/javafx-latest/windows-i586/javafx2.jnlp"/>
  </resources>
  <resources>
    <j2se version="1.6+" href="http://java.sun.com/products/autodl/j2se"/>
    <jar href="CodebaseTest.jar" size="26795" download="eager" />
  </resources>
  <applet-desc  width="400" height="400" main-class="com.javafx.main.NoJavaFXFallback"  name="CodebaseTest_name" >
    <param name="requiredFXVersion" value="2.2+"/>
  </applet-desc>
  <jfx:javafx-desc  width="400" height="400" main-class="deploy.sqe.CodebaseTest"  name="CodebaseTest_name" />
  <update check="background"/>
</jnlp>
temp: returning LaunchDesc from XMLFormat.parse():

<jnlp spec="1.0" codebase="https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/" href="https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jnlp">
  <information>
    <title>CodebaseTest</title>
    <vendor>Deployment SQE</vendor>
    <homepage href="null"/>
    <description>Sample JavaFX 2.0 application.</description>
    <offline-allowed/>
  </information>
  <update check="background" policy="always"/>
  <resources>
    <javafx-runtime version="2.2+" href="http://javadl.sun.com/webapps/download/GetFile/javafx-latest/windows-i586/javafx2.jnlp"/>
    <java href="http://java.sun.com/products/autodl/j2se" version="1.6+"/>
    <jar href="https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar" download="eager" main="false"/>
  </resources>
  <applet-desc name="CodebaseTest_name" main-class="com.javafx.main.NoJavaFXFallback" documentbase="https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.html" width="400" height="400">
    <param name="requiredFXVersion" value="2.2+"/>
  </applet-desc>
  <javafx-desc main-class="deploy.sqe.CodebaseTest"/>
</jnlp>
network: Cache entry not found [url: https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jnlp, version: null]
Java Plug-in 12.0.0.0
Using JRE version 9-ea+146 Java HotSpot(TM) 64-Bit Server VM
JRE expiration date: 5/22/17, 12:00 AM
User home directory = C:\Users\Administrator
----------------------------------------------------
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
l:   dump classloader list
m:   print memory usage
o:   trigger logging
q:   hide console
r:   reload policy configuration
s:   dump system and deployment properties
t:   dump thread list
v:   dump thread stack
x:   clear classloader cache
0-5: set trace level to <n>
----------------------------------------------------
cache: Adding MemoryCache entry: https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jnlp
cache: registerReference: com.sun.deploy.cache.MemoryCache$CachedResourceReference@ee84ac69: 1
network: Cache entry not found [url: https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar, version: null]
basic: Plugin2ClassLoader.addURL2 called for https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar
basic: Plugin2ClassLoader.drainPendingURLs addURL called for https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar
network: Total size to download: 26795
security: Security check for progress jars: allSigned=true
network: Cache entry not found [url: https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar, version: null]
network: Cache entry not found [url: https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar, version: null]
network: Connecting https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar with proxy=DIRECT
network: Connecting http://mossad.us.oracle.com:8443/ with proxy=DIRECT
security: Loading SSL Root CA certificates from C:\Program Files\Java\jre-9\lib\security\cacerts
security: Loaded SSL Root CA certificates from C:\Program Files\Java\jre-9\lib\security\cacerts
security: Obtain certificate collection in SSL Root CA certificate store
security: Obtain certificate collection in SSL Root CA certificate store
security: Loading Deployment SSL certificates from C:\Users\Administrator\AppData\LocalLow\Sun\Java\Deployment\security\trusted.jssecerts
security: Loaded Deployment SSL certificates from C:\Users\Administrator\AppData\LocalLow\Sun\Java\Deployment\security\trusted.jssecerts
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: Loading certificates from Internet Explorer ROOT certificate store
security: Loaded certificates from Internet Explorer ROOT certificate store
security: Loading certificates from Internet Explorer DISALLOWED certificate store
security: Loaded certificates from Internet Explorer DISALLOWED certificate store
security: Loaded blacklisted.certs file: C:\Users\Administrator\AppData\LocalLow\Sun\Java\Deployment\security\blacklisted.certs
security: SHA-256Certificate finger print: E1F5AC4133A6D1B4D5CD3B185BCD204DFFF00091C00F3ABCEB78C52DFC215E13
security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
security: Checking if SSL certificate is in Deployment permanent certificate store
security: Loading certificates from Internet Explorer ROOT certificate store
security: Loaded certificates from Internet Explorer ROOT certificate store
security: Obtain certificate collection in SSL Root CA certificate store
security: Obtain certificate collection in SSL Root CA certificate store
security: Obtain certificate collection in SSL Root CA certificate store
security: Obtain certificate collection in SSL Root CA certificate store
security: Invalid certificate from HTTPS server
network: Cache entry not found [url: https://mossad.us.oracle.com, version: null]
security: Saving certificates in Deployment session certificate store
security: Saved certificates in Deployment session certificate store
security: Cant read client certificate from cache, exception has been thrown.
java.net.SocketException: Socket closed
	at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:116)
	at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:153)
	at java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:236)
	at java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:79)
	at java.base/sun.security.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:1144)
	at java.base/sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:414)
	at java.base/sun.security.ssl.Handshaker.processLoop(Handshaker.java:1061)
	at java.base/sun.security.ssl.Handshaker.processRecord(Handshaker.java:995)
	at java.base/sun.security.ssl.SSLSocketImpl.processInputRecord(SSLSocketImpl.java:1132)
	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1069)
	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:968)
	at java.base/sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1395)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1422)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1406)
	at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:558)
	at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1535)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.access$200(HttpURLConnection.java:96)
	at java.base/sun.net.www.protocol.http.HttpURLConnection$9.run(HttpURLConnection.java:1455)
	at java.base/sun.net.www.protocol.http.HttpURLConnection$9.run(HttpURLConnection.java:1453)
	at java.base/java.security.AccessController.doPrivileged(Native Method)
	at java.base/java.security.AccessController.doPrivilegedWithCombiner(AccessController.java:792)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1452)
	at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:235)
	at jdk.deploy@9-ea/com.sun.deploy.net.HttpUtils.followRedirects(HttpUtils.java:52)
	at jdk.deploy@9-ea/com.sun.deploy.net.BasicHttpRequest.doRequest(BasicHttpRequest.java:139)
	at jdk.deploy@9-ea/com.sun.deploy.net.BasicHttpRequest.doGetRequestEX(BasicHttpRequest.java:31)
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.actionDownload(DownloadEngine.java:579)
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.downloadResource(DownloadEngine.java:914)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:387)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:325)
	at jdk.javaws@9-ea/com.sun.javaws.LaunchDownload$DownloadTask.call(LaunchDownload.java:1643)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1161)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:844)
network: Connecting https://mossad.us.oracle.com:8443/basicAuth/tests/httpAuthentication/html/CodebaseTest.jar with proxy=DIRECT
network: Connecting http://mossad.us.oracle.com:8443/ with proxy=DIRECT
security: Obtain certificate collection in SSL Root CA certificate store
security: Obtain certificate collection in SSL Root CA certificate store
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: SHA-256Certificate finger print: E1F5AC4133A6D1B4D5CD3B185BCD204DFFF00091C00F3ABCEB78C52DFC215E13
security: Checking if certificate is in Internet Explorer DISALLOWED certificate store
security: Cant read client certificate from cache, exception has been thrown.
java.net.SocketException: Socket closed
	at java.base/java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:116)
	at java.base/java.net.SocketOutputStream.write(SocketOutputStream.java:153)
	at java.base/sun.security.ssl.SSLSocketOutputRecord.flush(SSLSocketOutputRecord.java:236)
	at java.base/sun.security.ssl.HandshakeOutStream.flush(HandshakeOutStream.java:79)
	at java.base/sun.security.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:1144)
	at java.base/sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:414)
	at java.base/sun.security.ssl.Handshaker.processLoop(Handshaker.java:1061)
	at java.base/sun.security.ssl.Handshaker.processRecord(Handshaker.java:995)
	at java.base/sun.security.ssl.SSLSocketImpl.processInputRecord(SSLSocketImpl.java:1132)
	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1069)
	at java.base/sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:968)
	at java.base/sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1395)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1422)
	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1406)
	at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:558)
	at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1535)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.access$200(HttpURLConnection.java:96)
	at java.base/sun.net.www.protocol.http.HttpURLConnection$9.run(HttpURLConnection.java:1455)
	at java.base/sun.net.www.protocol.http.HttpURLConnection$9.run(HttpURLConnection.java:1453)
	at java.base/java.security.AccessController.doPrivileged(Native Method)
	at java.base/java.security.AccessController.doPrivilegedWithCombiner(AccessController.java:792)
	at java.base/sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1452)
	at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:235)
	at jdk.deploy@9-ea/com.sun.deploy.net.HttpUtils.followRedirects(HttpUtils.java:52)
	at jdk.deploy@9-ea/com.sun.deploy.net.BasicHttpRequest.doRequest(BasicHttpRequest.java:139)
	at jdk.deploy@9-ea/com.sun.deploy.net.BasicHttpRequest.doRequest(BasicHttpRequest.java:81)
	at jdk.deploy@9-ea/com.sun.deploy.net.BasicHttpRequest.doGetRequest(BasicHttpRequest.java:46)
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.actionDownload(DownloadEngine.java:612)
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.downloadResource(DownloadEngine.java:914)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:387)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:325)
	at jdk.javaws@9-ea/com.sun.javaws.LaunchDownload$DownloadTask.call(LaunchDownload.java:1643)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1161)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	at java.base/java.lang.Thread.run(Thread.java:844)
ExitException[ 3]com.sun.deploy.net.FailedDownloadException: Unable to load resource
	at jdk.plugin@9-ea/sun.plugin2.applet.JNLP2Manager.downloadResources(JNLP2Manager.java:1846)
	at jdk.plugin@9-ea/sun.plugin2.applet.JNLP2Manager.prepareLaunchFile(JNLP2Manager.java:1457)
	at jdk.plugin@9-ea/sun.plugin2.applet.JNLP2Manager.loadJarFiles(JNLP2Manager.java:476)
	at jdk.plugin@9-ea/sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Plugin2Manager.java:1769)
	at java.base/java.lang.Thread.run(Thread.java:844)
Caused by: com.sun.deploy.net.FailedDownloadException: Unable to load resource
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.actionDownload(DownloadEngine.java:807)
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.downloadResource(DownloadEngine.java:914)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:387)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:325)
	at jdk.javaws@9-ea/com.sun.javaws.LaunchDownload$DownloadTask.call(LaunchDownload.java:1643)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1161)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	... 1 more
basic: exception: Unable to load resource.
ExitException[ 3]com.sun.deploy.net.FailedDownloadException: Unable to load resource
	at jdk.plugin@9-ea/sun.plugin2.applet.JNLP2Manager.downloadResources(JNLP2Manager.java:1846)
	at jdk.plugin@9-ea/sun.plugin2.applet.JNLP2Manager.prepareLaunchFile(JNLP2Manager.java:1457)
	at jdk.plugin@9-ea/sun.plugin2.applet.JNLP2Manager.loadJarFiles(JNLP2Manager.java:476)
	at jdk.plugin@9-ea/sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Plugin2Manager.java:1769)
	at java.base/java.lang.Thread.run(Thread.java:844)
Caused by: com.sun.deploy.net.FailedDownloadException: Unable to load resource
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.actionDownload(DownloadEngine.java:807)
	at jdk.deploy@9-ea/com.sun.deploy.net.DownloadEngine.downloadResource(DownloadEngine.java:914)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:387)
	at jdk.deploy@9-ea/com.sun.deploy.cache.ResourceProviderImpl.getResource(ResourceProviderImpl.java:325)
	at jdk.javaws@9-ea/com.sun.javaws.LaunchDownload$DownloadTask.call(LaunchDownload.java:1643)
	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1161)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
	... 1 more
security: Reset deny session certificate store