RFR (JDK 12): 6899533: SecureClassLoader and URLClassLoader have unnecessary check for createClassLoader permission
Sean Mullan
sean.mullan at oracle.com
Thu Sep 6 19:29:12 UTC 2018
Please review this change to remove code that is no longer necessary now
that pre-JDK 1.2 SecurityManager methods are no longer supported [1]. In
addition, the initialized flag and associated code has been removed from
SecureClassLoader as this was only necessary to prevent finalizer
attacks prior to JDK 6.
webrev: http://cr.openjdk.java.net/~mullan/webrevs/6899533/webrev.00/
bug: https://bugs.openjdk.java.net/browse/JDK-6899533
--Sean
[1] https://bugs.openjdk.java.net/browse/JDK-8189750
More information about the security-dev
mailing list