Hi, This is a request to backport a JDK 8 fix into JDK 7u4:
7095980: Ensure HttpURLConnection (and supporting APIs) don't expose HttpOnly cookies
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7095980 The fix has already been pushed to JDK 8: http://hg.openjdk.java.net/jdk8/tl/jdk/rev/33ac7a057b9c The code changes for jdk7u4 are identical to the ones in jdk8. Thanks, -Chris.