diff --git a/jdk/src/share/classes/java/net/HttpURLConnection.java b/jdk/src/share/classes/java/net/HttpURLConnection.java index db4fc05d905..3b74394f6cd 100644 --- a/jdk/src/share/classes/java/net/HttpURLConnection.java +++ b/jdk/src/share/classes/java/net/HttpURLConnection.java @@ -400,7 +400,8 @@ abstract public class HttpURLConnection extends URLConnection { * @exception ProtocolException if the method cannot be reset or if * the requested method isn't valid for HTTP. * @exception SecurityException if a security manager is set and the - * "allowHttpTrace" NetPermission is not granted. + * method is "TRACE", but the "allowHttpTrace" + * NetPermission is not granted. * @see #getRequestMethod() */ public void setRequestMethod(String method) throws ProtocolException { diff --git a/jdk/src/share/classes/java/net/NetPermission.java b/jdk/src/share/classes/java/net/NetPermission.java index 0c459c3d5ab..2e1a2c93bba 100644 --- a/jdk/src/share/classes/java/net/NetPermission.java +++ b/jdk/src/share/classes/java/net/NetPermission.java @@ -73,6 +73,13 @@ import java.util.StringTokenizer; * * * + * getNetworkInformation + * The ability to retrieve all information about local network interfaces. + * Malicious code can read information about network hardware such as + * MAC addresses, which could be used to construct local IPv6 addresses. + * + * + * * getProxySelector * The ability to get the proxy selector used to make decisions * on which proxies to use when making network connections.