How can I circumvent XProtect and re-enable Java Applets?

Solution 1:

You can disable the XProtect updates in System Preferences => Security => General, and there uncheck the box "Automatically update safe downloads list."

Now you can change the version info in /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

Solution 2:

Just got bitten by this & there is another way to re-enable Java that is outlined here.

So the deal is Apple will not load Java less than version 1.6.0_37-b06-435 or 1.7.11.22. So the hacky—but usable—solution is to edit the XProtect.meta.plist. Using my 10.6.8 install using Java 1.6.0_37-b06-434 as an example.

sudo nano /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta.plist

Find this line:

<string>1.6.0_37-b06-435</string>

And change it to this:

<string>1.6.0_37-b06-434</string>

Was able to do this & have loaded a Java page with a plug-in without issue.

Why does Apple set the expiration to January 31, 2013 but doesn’t release an update prior to that date is beyond me.