Confused. Aren't all Security properties security-related? This is not about normal system properties.
And the method name in the latest webrev is "isSecurityProperty" without the "JDK" word. I assume this means you don't care about the difference between SE properties and JDK properties. --Max > On Nov 14, 2018, at 2:53 AM, Sean Mullan <sean.mul...@oracle.com> wrote: > > * src/java.base/share/classes/java/security/Security.java > > The isJdkSecurityProperty method could return false positives, for example > there may be a non-JDK property starting with "security.". I was thinking it > would be better to put all the JDK property names in a HashSet which is > populated by the static initialize() method, and only if event logging is > enabled. Then setProperty can just check if the property name is in this set.