tree 26ed1a17ccaf3ba119ffbce27c66822ddc13729c
parent 90e34878a1224d6bd89af5878841e026bdab5d92
author Simon Willnauer <simonw@apache.org> 1566025778 +0200
committer Oleg Kalnichevski <olegk@apache.org> 1566120845 +0200

Execute Socket#connect under doPrivileged

In order to allow users to run under a security manager that only grants
connect permission to the httpcore codebase the connect methods should
be executed in a doPriveledged block.
This is certainly not the only issue that users run into when they
install a SecurityManager with strict permissions but certainly the
most prominent and most likely one. Upstream components like the client
might also need to protect places accessing the proxy selector etc.