RFR: JDK-8285504 Minor cleanup could be done in javax.net [v4]
Bradford Wetmore
wetmore at openjdk.java.net
Thu Apr 28 16:30:46 UTC 2022
On Thu, 28 Apr 2022 16:22:43 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:
>> src/java.base/share/classes/javax/net/ssl/SSLSocketFactory.java line 92:
>>
>>> 90: static String getSecurityProperty(final String name) {
>>> 91: return AccessController.doPrivileged((PrivilegedAction<String>) () -> {
>>> 92: return Security.getProperty(name);
>>
>> I assume we still need to do the if-empty-then-null conversion?
>
> Just found the same. This needs to be reverted. You can set a Security Property to an "empty" string which won't work here. Suggest you revert to previous code, possibly using a lambda if that was the original intent.
`Security.getProperty()` does not specify the value will be `trim()`.
-------------
PR: https://git.openjdk.java.net/jdk/pull/8384
More information about the security-dev
mailing list