7 Replies Latest reply: Jul 15, 2013 1:53 PM by richardsonheights
yabbanoname Level 1 Level 1

Autostarting .jnlp files via Safari 6.0.3 doesn't work (6.0.2 does autostart .jnlp files), file gets downloaded but no autostart (Enable Webstart is however enabled in Java prefs).

Using Chrome does autostart these .jnlp files.


OS X Mountain Lion (10.8.3)
Reply by Linc Davis on Mar 15, 2013 8:43 AM Helpful

Impact: Visiting a maliciously crafted website could allow a Java Web Start application to be launched automatically even if the Java plug-in is disabled

     

Description: Java Web Start applications would run even if the Java plug-in was disabled. This issue was addressed by removing JNLP files from the CoreTypes safe file type list, so the Web Start application will not be run unless the user opens it in the Downloads directory.

About the security content of OS X Mountain Lion v10.8.3 and Security Update 2013-001

All replies