Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8015458

Aborting the update after clicking "Update" on the "Java is insecure" warning message forwards all applets to java.com/download

    Details

    • Subcomponent:
    • Introduced In Version:
    • Resolved In Build:
      b01
    • OS:
      linux, os_x, solaris, windows

      Backports

        Description

        1. Older release installed (we tried both 7u15 and 7u17).
        2. Launch http://java.com/verify (or another site with a Java applet like http://time.gov/timezone.cgi?Pacific/d/-8/java ) in any browser (IE, Chrome, FF)
        3. "Java is insecure" dialog appears. Click the Update button
        4. Page is replaced by the java.com/download page.
        5. Close the browser.
        6. Next time you encounter a page with java content (in any browser), the page is automatically redirected to java.com/download. (In Chrome, you are asked if you want to run Java content, then if you click either of the Run buttons you are redirected at that time.)

        You can watch a screencast here: http://www.screencast.com/t/NB85BCnkeD

        This behavior is not expected and not to spec. If the user does not proceed with the Java installation, we should allow them to go back to the page and run the applet using their existing version. And the effects of clicking Update should not be permanent.

        This affects both Windows and Mac OS

          Issue Links

            Activity

            Hide
            jmhoffma Jeff Hoffman added a comment -
            It is a significant problem. We had to include the following link on the java.com/download page (see image):
            http://java.com/en/download/faq/expire_date.xml#redirect
            Show
            jmhoffma Jeff Hoffman added a comment - It is a significant problem. We had to include the following link on the java.com/download page (see image): http://java.com/en/download/faq/expire_date.xml#redirect
            Hide
            prhenry Penni Henry (Inactive) added a comment -
            I see this has approval for 7u25 by Stephen Hu - I need to see SQE-OK for 7u40.
            Show
            prhenry Penni Henry (Inactive) added a comment - I see this has approval for 7u25 by Stephen Hu - I need to see SQE-OK for 7u40.
            Hide
            jijising Jitender Singh added a comment -
            SQE-OK to get this issue fixed for 7u40
            Show
            jijising Jitender Singh added a comment - SQE-OK to get this issue fixed for 7u40
            Hide
            rlewis Roger Lewis added a comment -
            WORKAROUND

            The workaround as been posted on:
            http://java.com/en/download/faq/expire_date.xml#redirect



            .
            Show
            rlewis Roger Lewis added a comment - WORKAROUND The workaround as been posted on: http://java.com/en/download/faq/expire_date.xml#redirect .
            Hide
            scfitch Stephen Fitch added a comment -
            Removed BPR ask - people hitting this between now and 7u40 will need to consider the options offered at:
             https://www.java.com/en/download/faq/expire_date.xml#redirect
            Show
            scfitch Stephen Fitch added a comment - Removed BPR ask - people hitting this between now and 7u40 will need to consider the options offered at:   https://www.java.com/en/download/faq/expire_date.xml#redirect

              People

              • Assignee:
                ddehaven David Dehaven
                Reporter:
                jmhoffma Jeff Hoffman
              • Votes:
                0 Vote for this issue
                Watchers:
                12 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: