JDK-8353642 : Deprecate URL::getPermission method and networking permission classes for removal
  • Type: Enhancement
  • Component: core-libs
  • Sub-Component: java.net
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2025-04-03
  • Updated: 2025-05-21
  • Resolved: 2025-05-12
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 25
25 b23Fixed
Related Reports
CSR :  
Relates :  
Relates :  
Relates :  
Relates :  
Description
Now that JEP 486 has been integrated and the Security Manager is permanently disabled, the following permission classes in the networking libraries area can be deprecated for removal as they are no longer useful: NetPermission, NetworkPermission, URLPermission. The URL::getPermission method serves little purpose and should also be deprecated.

Note that SocketPermission is not deprecated at this time, due to a dependency from java.security.CodeSource,
Deprecation of SocketPermission will be the object of a follow-up RFE (JDK-8356557).
Comments
Changeset: 45dfc2c6 Branch: master Author: Daniel Fuchs <dfuchs@openjdk.org> Date: 2025-05-12 16:49:42 +0000 URL: https://git.openjdk.org/jdk/commit/45dfc2c6d6d6b2b0749347b0150bb22d49f12767
12-05-2025

A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/24592 Date: 2025-04-11 09:00:05 +0000
11-04-2025