-
CSR
-
Resolution: Approved
-
P3
-
None
-
minimal
-
No risk or compatibility issue since this change is solely informative documentation
-
Java API
-
SE
Summary
The reference to the "Secure Coding Guidelines" is added to the javax.swing.JPasswordField class description.
Problem
Additional information about "handling confidential information" can help to use the JPasswordField properly.
Solution
The link to the "Secure Coding Guidelines" is added.
Specification
+ * <strong>Warning:</strong> The {@code JPasswordField} will not show the
+ * original characters that were typed, instead displaying alternative text or
+ * graphics. However this doesn't prevent the password from appearing in the
+ * system memory. For handling confidential information such as the password
+ * text, refer to the relevant section at
+ * <a href="https://www.oracle.com/java/technologies/javase/seccodeguide.html">
+ * Secure Coding Guidelines</a>.
+ * <p>
* <strong>Warning:</strong> Swing is not thread safe. For more
- csr of
-
JDK-8268087 Update documentation of the JPasswordField
- Resolved