JDK-8356557 : Update CodeSource::implies API documentation and deprecate java.net.SocketPermission class for removal
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2025-05-08
  • Updated: 2025-07-25
  • Resolved: 2025-07-22
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 26
26 b08Fixed
Related Reports
CSR :  
JDK-8362175 - Update CodeSource::implies API documentation and deprecate java.net.SocketPermission class for removal
Relates :  
JDK-8353642 - Deprecate URL::getPermission method and networking permission classes for removal
Relates :  
JDK-8360166 - CodeSource.implies(): Wildcard host fails to imply specific host
Sub Tasks
JDK-8362613 :  
Release Note: SocketPermission Class Deprecated for Removal - Resolved
Description
Now that JEP 486 has been integrated and the Security Manager is permanently disabled, the  `SocketPermission` class could be deprecated for removal. However, the public API documentation of `java.security.CodeSource::implies` refers to `SocketPermission`, which prevents deprecating `SocketPermission` until `CodeSource::implies` is fixed to no longer depend on `SocketPermission`
Comments
Changeset: d714b5d3 Branch: master Author: Sean Mullan <mullan@openjdk.org> Date: 2025-07-22 15:13:06 +0000 URL: https://git.openjdk.org/jdk/commit/d714b5d3dad58f7f6550d7a95fdc2b3f964a4129
22-07-2025
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/26300 Date: 2025-07-14 19:19:47 +0000
14-07-2025