Name: boT120536 Date: 02/27/2001


java version "1.3.0"

The javadoc for CodeSource.implies(), while apparently logically correct,
is unclear to a casual reader. Specifically, you ought to
make clear that a CodeSource with a null URL and null certificate chain
implies every other CodeSource. Such instances (call'em something like
the *root* code sources) deserve mention because of the impact they can have in
a java.security.Policy implementation.
(Review ID: 117686)
======================================================================