<AWT Dev> [10] Review request for 8154405: AccessControlException by URLPermission check

[semyon.sadetsky at oracle.com]

+1

--Semyon


On 11/17/17 6:38 AM, Dmitry Markov wrote:
> Hello,
>
> Could you review a fix for jdk10, please?
>
>  bug: https://bugs.openjdk.java.net/browse/JDK-8154405
>  webrev: http://cr.openjdk.java.net/~dmarkov/8154405/webrev.00/ 
> <http://cr.openjdk.java.net/%7Edmarkov/8154405/webrev.00/>
>
> Problem description:
> The current implementation of Toolkit.getImage(URL url) and 
> Toolkit.createImage(URL url) uses URLPermission to perform security 
> checks. However the documentation says that security manager’s method 
> checkPermission() is called with url.openConnection().getPermission() 
> permission and url.openConnection().getPermission() returns 
> SocketPermission. So there is an inconsistency between the 
> documentation and the implementation.
>
> Fix:
> It is necessary to update the description of the methods to get rid of 
> confusing statements.
>
> Thanks,
> Dmitry 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/awt-dev/attachments/20171117/810a08c6/attachment.html>