RFR: 8356557: Update CodeSource::implies API documentation and deprecate java.net.SocketPermission class for removal

Sean Mullan mullan at openjdk.org
Mon Jul 14 19:24:51 UTC 2025


`SocketPermission` should be deprecated for removal as has already been done for many other `Permission` subclasses. However, `CodeSource.implies()` has specification dependencies on `SocketPermission` which requires additional changes to decouple those dependencies. 

This change deprecates `SocketPermission`for removal and removes the dependency on `SocketPermission` from `CodeSource.implies` by copying the relevant conditions from `SocketPermission.implies`. Additional test cases for `CodeSource.implies` were also added to check that the behavior is consistent.

Note that we may also eventually deprecate `CodeSource.implies` for removal but that requires more investigation.

-------------

Commit messages:
 - Initial revision.

Changes: https://git.openjdk.org/jdk/pull/26300/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=26300&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8356557
  Stats: 59 lines in 3 files changed: 51 ins; 1 del; 7 mod
  Patch: https://git.openjdk.org/jdk/pull/26300.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/26300/head:pull/26300

PR: https://git.openjdk.org/jdk/pull/26300


More information about the security-dev mailing list