On 26/04/13 16:47, Alan Bateman wrote:
On 26/04/2013 15:36, Michael McMahon wrote:
:
The API change can be seen at the URL below:
http://cr.openjdk.java.net/~michaelm/8010464/api/
One comment on the "Security permissions" section of HttpURLConnection
is that it "caller must have permission" isn't clear. I think it is
trying to say that calling any method defined by this class that
results in an attempt to establish a connection will require at least
one of the permissions listed.
Okay. I'll try to make that more explicit.
Does exiting HTTP protocol handlers (meaning those that aren't
included in the JDK) require any consideration?
Are you referring to handlers that did no security checking previously,
or handlers
that did check for SocketPermission, but won't know about HttpURLPermission
and now won't be compatible?
Either way, my preference would be still for it to be mandatory in JDK 8.
Thanks
Michael.
-Alan.
