jdk undocumented static variable may allow data exchange between sites.
vulners.com/securityvulns/securityvulns:doc:5275