The plugin has a legacy dependency on sun.misc.ClassFileTransformer to handle bad JDK 1.1 classes. Can this dependency be removed so that we can removed this class?

It should be noted that ClassFileTransformer no longer receives ClassLoader events (this was a deliberate change in JDK 8 that was agreed with the deployment team).

If removing the dependency is awkward then can we just move sun.misc.ClassFileTransformer to the deploy repository (maybe into the package sun.plugin.security)