RFR: 8281561: Disable http DIGEST mechanism with MD5 by default [v2]

Weijun Wang weijun at openjdk.java.net
Thu Mar 10 15:35:52 UTC 2022


On Thu, 10 Mar 2022 10:48:09 GMT, Michael McMahon <michaelm at openjdk.org> wrote:

>> Maybe `String.trim()` should be called on each element after splitting instead: you want to remove spaces before and after commas, not necessarily spaces within a name. "MD 5, SHA-256" probably shouldn't be parsed as "MD5,SHA-256".
>
> Okay.

`s.n.w.p.h.HttpURLConnection::schemesListToSet` uses `list.split("\\s*,\\s*")` which ignores multiple consecutive spaces as well. Can we make it a helper method somewhere?

-------------

PR: https://git.openjdk.java.net/jdk/pull/7688


More information about the net-dev mailing list