Private access is pointless here. Change it to protected.
Also remove deprecated newFromURL() usage.

Change-Id: I2737442ac19e7a77288236bb30a3d9487c356aa5