Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

JodaTime uses java.lang.SecurityManager which is scheduled for deletion #756

Open
kluever opened this issue Jan 5, 2024 · 4 comments
Open

Comments

@kluever
Copy link
Contributor

kluever commented Jan 5, 2024

https://github.com/JodaOrg/joda-time/blob/main/src/main/java/org/joda/time/convert/ConverterManager.java uses SecurityManager which is "deprecated and subject to removal in a future release. There is no replacement for the Security Manager. See JEP 411 for discussion and alternatives."

@kluever
Copy link
Contributor Author

kluever commented Jan 5, 2024

A teammate also said:

I'll note too that its references to java.security.AccessController and java.security.Policy are in the same boat. I imagine if SecurityManager is finally deleted then those will be at the same time.

There are also similar warnings about calls to the constructors of Integer etc.

@jodastephen
Copy link
Member

Yes, it is all a lot of fun....

@jodastephen
Copy link
Member

If version 3 of Joda-Time is successful, use of the security manager would be removed.

@kluever
Copy link
Contributor Author

kluever commented Mar 6, 2024

FWIW, we probably don't need to worry about the boxed primitive constructors that I previously mentioned. It sounds like the upstream folks are going to remove the forRemoval bit on those deprecations.

The SecurityManager issue still is a problem though :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants