On Thu, 10 Nov 2022 01:02:00 GMT, pandaapo <d...@openjdk.org> wrote: > The cache named `signerToCodeSource` in `JarVerifier` is never used now.
The method is not called since JDK 9, and that's why I set Affected Version/s to 8-pool. We don't intend to fix this in the current release. ------------- PR: https://git.openjdk.org/jdk/pull/11072
