6801071: Remote sites can compromise user privacy and possibly hijack web sessions Reviewed-by: jccollet, hawtin

6823373: [ZDI-CAN-460] Java Web Start JPEG header parsing needs more scruity Reviewed-by: igor

6657133: Mutable statics in imageio plugins (findbugs) Reviewed-by: prr

6656625: ImageReaderSpi.STANDARD_INPUT_TYPE/ImageWriterSpi.STANDARD_OUTPUT_TYPE are mutable static (findbugs) Reviewed-by: prr

6736293: OpenType checks can be bypassed through finalizer resurrection Reviewed-by: hawtin

6656586: Cursor.predefined is protected static mutable (findbugs) Reviewed-by: hawtin, igor

6818787: It is possible to reposition the security icon too far from the border of the window on X11 Summary: The constraints for the position of the icon are moved to the shared code Reviewed-by: art, dcherepanov

6805231: Security Warning Icon is missing in Windows 2000 Prof from Jdk build 6u12 Summary: The icon becomes layered only when the fading-out effect is being performed. Reviewed-by: art, dcherepanov

6801497: Proxy is assumed to be immutable but is non-final Summary: Cloned the proxy instance when necessary Reviewed-by: chegar

6837293: Reapply fix for 6588003 to JDK7 Reviewed-by: alexp

Merge

6777487: Encoder allows reading private variables with certain names Reviewed-by: peterz

6660539: Introspector shares cache of mutable BeanInfo between AppContexts. Reviewed-by: peterz

6826801: JarFileFactory should not use HashMap<URL> Summary: Replace URL with a String representation. Reviewed-by: michaelm, jccollet

6826780: URLClassPath should use HashMap<String, XXX> instead of HashMap<URL, XXX> Summary: Replace URL with a String representation. Reviewed-by: michaelm, jccollet