RFR: 8344221: Remove calls to SecurityManager and and doPrivileged in java.net.IDN, java.net.URL, java.net.URLConnection, sun.net.util.URLUtil, and java.net.URLStreamHandlerProvider after JEP 486 integration

[Alan Bateman]

On Fri, 15 Nov 2024 16:58:46 GMT, Daniel Fuchs <dfuchs at openjdk.org> wrote:

> Calls to getSecurityManager, checkPermission, and doPrivileged are removed.
> 
> - URLUtils.getConnectPermission is still used in the client area and couldn't be removed right away. [JDK-8344303](https://bugs.openjdk.org/browse/JDK-8344303) has been logged.
> 
> - Similarly, URLConnection.getPermission is a public API. [JDK-8344308](https://bugs.openjdk.org/browse/JDK-8344308) has been logged to deprecate it for removal.

src/java.base/share/classes/java/net/URL.java line 674:

> 672:         boolean isRelative = false;
> 673: 
> 674:         // Check for permission to specify a handler

I assume you should remove the comment too.

src/java.base/share/classes/java/net/URLConnection.java line 1406:

> 1404:                 f = iterator.next();
> 1405:             } catch (ServiceConfigurationError e) {
> 1406:                 if (e.getCause() instanceof SecurityException) {

I assume the try-catch can be removed as SecurityException won't be thrown.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/22153#discussion_r1844209664
PR Review Comment: https://git.openjdk.org/jdk/pull/22153#discussion_r1844211534