Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8041504

Caller-Allowable-Codebase update for 7u55/8u5

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: P4
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 8u40
    • Component/s: docs
    • Labels:

      Description

      On the page http://docs.oracle.com/javase/8/docs/technotes/guides/jweb/security/manifest.html#caller_allowable
      Can we please change from:
      See Codebase Attribute for a description of the values that are allowed. If a stand-alone asterisk (*) is specified as the value for the Caller-Allowable-Codebase attribute, then calls from JavaScript code to your RIA show a security warning, and users have the choice to allow the call or block the call. An option to remember the choice is also provided, and if selected, the warning is no longer shown when the RIA is launched.

      To:
      See Codebase Attribute for a description of the values that are allowed. If a stand-alone asterisk (*) is specified as the value for the Caller-Allowable-Codebase attribute, or an asterisk on a top level domain such as (*.org), then calls from JavaScript code to your RIA show a security warning, and users have the choice to allow the call or block the call. An option to remember the choice is also provided, and if the user choses the option to remember the choice to run the RIA, no further warning messages are shown for the same RIA when run with JavaScript from the same source.

        Attachments

          Activity

            People

            Assignee:
            jgordon Joni Gordon (Inactive)
            Reporter:
            ecostlow Erik Costlow (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Due:
              Created:
              Updated:
              Resolved: