Uploaded image for project: '[Read Only] - Hippo Repository'
  1. [Read Only] - Hippo Repository
  2. REPO-893

Review the import limitation of GroovyUpdaterClassLoader

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.26.00
    • Component/s: None
    • Labels:
      None

      Description

      GroovyUpdaterClassLoader has import black list in order to avoid file system access:

      private static final String[] starImportsBlacklist =

      { "java.nio.file", "java.net", "javax.net", "javax.net.ssl", "java.lang.reflect" }

      ;

      Also, it was assumed that the import black list checking is done only in the script level, not in the classes used in the script. I'd like to verify if this is true, too.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              wko Woonsan Ko
              Reporter:
              wko Woonsan Ko
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: