IICU_INCORRECT_INTERNAL_CLASS_USE false positive with JavaMail about fb-contrib

[mebigfatguy]

I see this from the javadoc

The JavaMail reference implementation includes protocol providers in subpackages of com.sun.mail. Note that the APIs to these protocol providers are not part of the standard JavaMail API. Portable programs will not use these APIs.

Nonportable programs may use the APIs of the protocol providers by (for example) casting a returned Folder object to a com.sun.mail.imap.IMAPFolder object. Similarly for Store and Message objects returned from the standard JavaMail APIs.

This is sort of a grey area it would seem.

[jsotuyod]

What that's saying is that those methods are not part of the standard javax.mail, but the reference implementation itself is open-source, pure Java, and can be added as a dependency and used safely even outside Oracle's JRE.

The APIs are safe to use, and intended for developer use. The only warning is that replacing that dependency with another javax.mail implementation (currently, the only other one is GNU JavaMail, which is stuck in version 1.3 of the spec) will not work (and hence they are in a separate packge).

Actually other implementation do the exact same thing, creating their providers outside javax.mail since they are not "portable" (i.e. drop-in replaceable), for instance GNU JavaMail's IMAPFolder

[mebigfatguy]

ok thanks

[ThrawnCA]

Xws-security also uses com.sun packages