stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

8154405: AccessControlException by URLPermission check

Browse Source 
Reviewed-by: serb, ssadetsky, mullan
This commit is contained in:
Dmitry Markov 2017-12-13 14:41:27 +00:00
parent fd4c8197ab
commit 90060a97f9
1 changed files with 14 additions and 10 deletions

24
src/java.desktop/share/classes/java/awt/Toolkit.java

@ -673,11 +673,13 @@ public abstract class Toolkit {
* <p>
* This method first checks if there is a security manager installed.
* If so, the method calls the security manager's
* {@code checkPermission} method with the
* url.openConnection().getPermission() permission to ensure
* that the access to the image is allowed. For compatibility
* with pre-1.2 security managers, if the access is denied with
* {@code FilePermission} or {@code SocketPermission},
* {@code checkPermission} method with the corresponding
* permission to ensure that the access to the image is allowed.
* If the connection to the specified URL requires
* either {@code URLPermission} or {@code SocketPermission},
* then {@code URLPermission} is used for security checks.
* For compatibility with pre-1.2 security managers, if the access
* is denied with {@code FilePermission} or {@code SocketPermission},
* the method throws the {@code SecurityException}
* if the corresponding 1.1-style SecurityManager.checkXXX method
* also denies permission.
@ -717,11 +719,13 @@ public abstract class Toolkit {
* <p>
* This method first checks if there is a security manager installed.
* If so, the method calls the security manager's
* {@code checkPermission} method with the
* url.openConnection().getPermission() permission to ensure
* that the image creation is allowed. For compatibility
* with pre-1.2 security managers, if the access is denied with
* {@code FilePermission} or {@code SocketPermission},
* {@code checkPermission} method with the corresponding
* permission to ensure that the image creation is allowed.
* If the connection to the specified URL requires
* either {@code URLPermission} or {@code SocketPermission},
* then {@code URLPermission} is used for security checks.
* For compatibility with pre-1.2 security managers, if the access
* is denied with {@code FilePermission} or {@code SocketPermission},
* the method throws {@code SecurityException}
* if the corresponding 1.1-style SecurityManager.checkXXX method
* also denies permission.