RFR: 8356557: Update CodeSource::implies API documentation and deprecate java.net.SocketPermission class for removal [v2]

Sean Mullan mullan at openjdk.org
Mon Jul 14 20:04:21 UTC 2025


> `SocketPermission` should be deprecated for removal as has already been done for many other `Permission` subclasses. However, `CodeSource.implies()` has specification dependencies on `SocketPermission` which requires additional changes to decouple those dependencies. 
> 
> This change deprecates `SocketPermission`for removal and removes the dependency on `SocketPermission` from `CodeSource.implies` by copying the relevant conditions from `SocketPermission.implies`. Additional test cases for `CodeSource.implies` were also added to check that the behavior is consistent.
> 
> Note that we may also eventually deprecate `CodeSource.implies` for removal but that requires more investigation.

Sean Mullan has updated the pull request incrementally with one additional commit since the last revision:

  Add @SuppressWarnings("removal") to SocketPermissionCollection.

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/26300/files
  - new: https://git.openjdk.org/jdk/pull/26300/files/593cab32..0f8c2635

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=26300&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=26300&range=00-01

  Stats: 1 line in 1 file changed: 1 ins; 0 del; 0 mod
  Patch: https://git.openjdk.org/jdk/pull/26300.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/26300/head:pull/26300

PR: https://git.openjdk.org/jdk/pull/26300


More information about the security-dev mailing list