On Fri, 27 Jan 2023 21:02:25 GMT, Glavo <d...@openjdk.org> wrote: > I think this is feasible, but it should be placed in a sub-package in > `jdk.internal`, because some trusted collections are outside `java.util`.
The proposals so far in this PR have major security implications. It's not clear to me this is the right PR to expand into defining a JDK internal notion of trusted collection. I don't wish to discourage contributors in this area but I think it would be better if this issue was owned by experienced Committer in the area. ------------- PR: https://git.openjdk.org/jdk/pull/12212