Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4183204

client-side multiplexing should be disabled

    Details

    • Type: Enhancement
    • Status: Resolved
    • Priority: P4
    • Resolution: Fixed
    • Affects Version/s: 1.2.0
    • Fix Version/s: 1.2.2
    • Component/s: core-libs
    • Labels:
      None
    • Subcomponent:
    • Resolved In Build:
      1.2.2
    • CPU:
      sparc
    • OS:
      solaris_2.5

      Description

      The use of multiplexing to the client bypasses intended security
      checks. It was initially introduced to allow callbacks to applets
      which were impossible to do because the Netscape browser's security
      manager did not allow applets to listen on a socket on an anonymous
      port.

      Client-side multiplexing should not be initiated and support
      for it should be removed. The server-side multiplexing should remain
      to be backwards compatible with earlier releases that use client-side
      multiplexing.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                peterjones Peter Jones
                Reporter:
                awollratsunw Ann Wollrath (Inactive)
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: