Add forbiddenAPIs Maven plugin to fail the build when

methods relying on default locale are charset are used.
Also forbid usage of URL.equals and .hashCode which may
resolve host named per DNS lookup.

Author: sebastian-nagel

pom.xml

@@ -173,6 +173,31 @@
         <artifactId>maven-surefire-plugin</artifactId>
         <version>3.2.5</version>
       </plugin>
+      <plugin>
+        <groupId>de.thetaphi</groupId>
+        <artifactId>forbiddenapis</artifactId>
+        <version>3.10</version>
+        <configuration>
+          <!-- if the used Java version is too new, don't fail, just do nothing: -->
+          <failOnUnsupportedJava>false</failOnUnsupportedJava>
+          <bundledSignatures>
+            <bundledSignature>jdk-unsafe</bundledSignature>
+            <bundledSignature>jdk-deprecated</bundledSignature>
+            <bundledSignature>jdk-non-portable</bundledSignature>
+          </bundledSignatures>
+          <signaturesFiles>
+            <signaturesFile>src/test/resources/forbidden-apis-signatures.txt</signaturesFile>
+          </signaturesFiles>
+        </configuration>
+        <executions>
+          <execution>
+            <goals>
+              <goal>check</goal>
+              <goal>testCheck</goal>
+            </goals>
+          </execution>
+        </executions>
+      </plugin>
     </plugins>
 
     <resources>

src/test/resources/forbidden-apis-signatures.txt

@@ -0,0 +1,2 @@
+java.net.URL#equals(java.lang.Object) @ may trigger a DNS lookup to resolve the host part
+java.net.URL#hashCode()               @ may trigger a DNS lookup to resolve the host part