Rob,
There are a few more places where the same limited doPrivileged call occurs
in HttpURLConnection and which need the same change.
Michael
On 20/05/15 13:24, Rob McKenna wrote:
Hi folks,
Looking for a review of this webrev:
http://cr.openjdk.java.net/~robm/8077155/webrev.01/
Basically the subjects credentials are not available to
HttpURLConnection.getInputStream0 since it now runs in a doPrivileged
block. Changing that to doPrivilegedWithCombiner allows
getInputStream0 access to the AccessControlContext's DomainCombiner
and the subjects associated credentials.
-Rob
