App Transport Security blocks http media on macOS with JDK build using new compilers

I get the following error when trying to run the AdvancedMedia sample in the FX Ensemble8 app on macOS 10.12 using a build of the JDK built from the recent compiler upgrade toolchain.

2018-04-26 12:00:01.791 java[22360:886979] App Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file.

This works with the promoted jdk-11+10 build.

This appears to be additional security that apple has added when building with newer versions of Xcode or the MacOSX SDK.

I get the same error using the OpenJDK build (without javafx.*modules) with the prototype unbundled FX SDK, so the problem will persist after we remove FX from the JDK. The error doesn’t seem to be specific to FX, but rather looks like a problem accessing certain types of files over http.

I have attached a simple test program that will reproduce the problem.

NOTE: JavaFX has been built using Xcode 9.1 and MacOSX SDK 10.11 since JDK 10.0.1, so the issue seems to be caused by the JDK compiler upgrade on Mac. I can reproduce this when I use a locally built JDK on my Mac, since I have a newer Xcode + MacOSX SDK.