Home > Java, Mac administration, Mac OS X, XProtect > Java blocked in Safari on 10.6.x – 10.8.x

Java blocked in Safari on 10.6.x – 10.8.x

As of January 31st, it appears that Apple has blocked both Java 6 and Java 7 Update 11 from running in Safari.


Update 1 – February 1, 2013: Oracle has released Java 7 Update 13 to address the vulnerabilities in Java 7 Update 11. Once Java 7 Update 13 has been installed, Safari will no longer block the Java plug-in on 10.7.x – 10.8.x.



Update 2 – February 1, 2013: Apple has released Java for Mac OS X 10.6 Update 12 to address the vulnerabilities in Java 6 on 10.6.x Macs. Once Java for Mac OS X 10.6 Update 12 has been installed via Apple’s Software Update, Safari will no longer block the Java plug-in on 10.6.x.


To verify this on your own machine:

1. Open Safari on a Mac running 10.6.x or higher.

2. Go to http://www.java.com/en/download/testjava.jsp to test your Java browser plug-in.

Instead of a report that Java is working, you’ll receive a Blocked Plug-In message.

Screen Shot 2013-01-31 at 6.45.36 AM

The best workaround at this time is to use Firefox. I tested with Firefox 18 and Firefox is not blocking the Java plug-in at this time.

Screen Shot 2013-01-31 at 6.46.27 AM

Current Status:

Java 6 on 10.6.x: Apple has released Java for Mac OS X 10.6 Update 12 to address the vulnerabilities in Java 6 on 10.6.x Macs. Once Java for Mac OS X 10.6 Update 12 has been installed via Apple’s Software Update, Safari will no longer block the Java plug-in on 10.6.x.

Java 7 on 10.7.x and 10.8.x: Oracle has released Java 7 Update 13 to address the vulnerabilities in Java 7 Update 11. Once Java 7 Update 13 has been installed, Safari will no longer block the Java plug-in on 10.7.x – 10.8.x

The blocking was done by Apple’s built-in malware protection. For those interested, the list of acceptable browser plug-in versions is stored at /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

As of 7:07 AM on Thursday, January 31st, XProtect.meta.plist on my 10.8.2 laptop had the following contents:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>JavaWebComponentVersionMinimum</key>
	<string>1.6.0_37-b06-435</string>
	<key>LastModification</key>
	<string>Thu, 31 Jan 2013 04:41:14 GMT</string>
	<key>PlugInBlacklist</key>
	<dict>
		<key>10</key>
		<dict>
			<key>com.macromedia.Flash Player.plugin</key>
			<dict>
				<key>MinimumPlugInBundleVersion</key>
				<string>11.3.300.271</string>
			</dict>
			<key>com.oracle.java.JavaAppletPlugin</key>
			<dict>
				<key>MinimumPlugInBundleVersion</key>
				<string>1.7.11.22</string>
			</dict>
		</dict>
	</dict>
	<key>Version</key>
	<integer>2028</integer>
</dict>
</plist>


Java 6 plug-in
The plugin version installed by Apple is 1.6.0_37-b06-434. The plug-in blacklist is specifying that 1.6.0_37-b06-435 or higher is required, so 1.6.0_37-b06-434 is being blocked automatically.

Java 7 plug-in
The plugin version installed by the current Oracle Java 7 Update 11 installer is 1.7.11.21. The plug-in blacklist is specifying that 1.7.11.22 or higher is required, so 1.7.11.21 is being blocked automatically.

  1. Louie
    January 31, 2013 at 6:43 pm

    Out of all the garbage out there your information helped the most! Thank you!

  2. Sonny
    January 31, 2013 at 11:01 pm

    I’ve been trying to troubleshoot this all freaking day. Thanks for this.

  3. Leroy Fong
    February 1, 2013 at 2:49 am

    I tried changing the string to 1.6.0_37-b06-434 but I can’t save it. It says that I do not have the permission. Please advice me how to resolve this. Thank you.

    • cashxx
      February 1, 2013 at 4:55 am

      use sudo to open the file…..sudo XProtect.meta.plist

      • cashxx
        February 1, 2013 at 4:56 am

        sudo pico XProtect.meta.plist

  4. Lisa
    February 1, 2013 at 5:10 am

    THANKS for posting this! I’ve been racking my brain all day trying to figure out what happened!

  5. MaaT
    February 1, 2013 at 6:43 am

    Guys,
    I’ve just updated the Java JDK and JRE to the last version – Yes! I had to Download and Run BOTH installers to get java to the its last version. Then I have to edit the /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist
    and set the “MinimumPlugInBundleVersion” to a version that already exist, instead of 1.7.11.22 I’ve set it to 1.7.11.21 and restart the Safari.

  6. ramesh
    February 1, 2013 at 3:10 pm

    Thanks folks, I changed the two strings in XProtect.meta.plist and it worked. No way I am installing Firefox just to get this working.

    1
    ……….
    > 6 1.6.0_37-b06-434
    7 LastModification
    8 Thu, 31 Jan 2013 16:55:59 GMT
    9 PlugInBlacklist
    10
    11 10
    12
    …..
    ….
    20 MinimumPlugInBundleVersion
    > 21 1.7.11.21
    22

    What a waste of time trying to figure out why this was happening.

  7. Vytas
    February 1, 2013 at 3:35 pm

    cashxx :
    sudo pico XProtect.meta.plist

    changing to 1.6.0_37-b06-434 works on 10.6 with Java 6

  8. February 1, 2013 at 4:23 pm

    I’m seeing the Java 6 block affect Firefox and Chrome too. Is anyone else seeing that?

    • Will.i.Am
      February 1, 2013 at 4:37 pm

      Yes I am seeing this blocked in Firefox and Chrome as well :-(

  9. February 1, 2013 at 4:46 pm

    Awesome info.! For those who are plist challenged, there is an app. for that now: https://www.dropbox.com/s/ckyo32fswxm4gym/Java%20Unblocker.dmg

  10. lex
    February 5, 2013 at 7:54 pm

    Modifying XProtect works fine. many, many thanks for this super job. sudo pico…1 Minute and it works (Search take nearly whole day) ;-)

  11. betty
    February 15, 2013 at 8:38 pm

    Anything for 10.5.8?

    • Topi Stolp
      February 19, 2013 at 7:37 am

      I have 10.5.8 and there’s no XProtect.meta.plist file in the folder given above. The current Java version installed on my Mac is 1.6.0_26-b03-384 and when I run Software Update, it says everything is up-to-date, which is strange since Java 6 has updates all the way to Update 39. I can run applets and webstart files just fine, though.

  12. Steffan JOhn
    March 12, 2013 at 6:32 pm

    how do I apply to User Groups in WGM?

    • March 12, 2013 at 6:35 pm

      Steffan,

      This is not manageable by managed preferences or by profiles.

      • Steffan JOhn
        March 12, 2013 at 7:27 pm

        Any idea how to fix this issue for 500 clients?

  13. March 12, 2013 at 7:28 pm

    Steffan,

    The first thing I’d recommend is getting Java updated on your systems. I also have another solution if that’s not an option:

    http://derflounder.wordpress.com/2013/02/24/managing-java-browser-plug-in-settings-for-apples-xprotect-malware-protection/

  14. George
    May 2, 2013 at 12:30 pm

    Thanx for posting! Very Helpful. :)

  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 141 other followers

%d bloggers like this: