Safari 6.0.4 and 5.1.9 allow you to enable the Java web plug-in on a website-by-website basis, with four settings to choose from.
Products Affected are Safari 5.1 (Mac OS X 10.6), Safari 6 (OS X Lion), Safari 6 (OS X Mountain Lion)
When you first visit a website that requires the Java web plug-in, Safari presents a prompt similar to this one but containing the specific website:
Once you have chosen to block or allow the Java web plug-in on a website, you can manage Java settings for that website in the Security pane of Safari Preferences. To do so, follow these steps:
Choose Safari > Preferences.
Click the “Security” tab, then click the “Manage Website Settings” button.
For each website you have visited that uses the Java web plug-in, you can choose one of four settings:
• Ask Before Using: Safari presents the option to Block or Allow the Java web plug-in. If an update is available for Java, Safari directs you to download the latest version.
• Block Always: Safari presents “Blocked Plug-in” text in the place of the Java web plug-in content. Clicking “Blocked Plug-in” will bring up the option to Block or Allow the Java web plug-in for that website.
• Allow: Websites set to “Allow” can run the Java web plug-in as long as the installed version of Java has no known critical security issues. If an update is available for Java, Safari directs you to download the latest version.
• Allow Always: The Java web plug-in will run without prompts from Safari. This setting is only recommended for trusted websites that require the Java web plug-in, such as websites that are only accessible on your company’s intranet.
For more information, visit: