Hi, Please find below a patch that fixes java/net/Authenticator and java/net/CookieHandler to use the loopback address - or the local host address if needed, instead of the wildcard whenever that is possible:
webrev: http://cr.openjdk.java.net/~dfuchs/webrev_8225578/webrev.00/ JBS: https://bugs.openjdk.java.net/browse/JDK-8225578 best regards, -- daniel