The private marshal() method in sun.security.util.Debug still contains code to parse "permission=<classname>" and "codebase=<URL>" options. These sub-options were part of the "access" option which was removed in JDK 24 as part of JEP 486, so this code can be removed.