Examples of org.apache.commons.jexl2.introspection.Sandbox

Package org.apache.commons.jexl2.introspection

Examples of org.apache.commons.jexl2.introspection.Sandbox

org.apache.commons.jexl2.introspection.Sandbox
A sandbox describes permissions on a class by explicitly allowing or forbidding access to methods and properties through "whitelists" and "blacklists".
A whitelist explicitly allows methods/properties for a class;
- If a whitelist is empty and thus does not contain any names, all properties/methods are allowed for its class.
- If it is not empty, the only allowed properties/methods are the ones contained.
A blacklist explicitly forbids methods/properties for a class;
- If a blacklist is empty and thus does not contain any names, all properties/methods are forbidden for its class.
- If it is not empty, the only forbidden properties/methods are the ones contained.
Permissions are composed of three lists, read, write, execute, each being "white" or "black":
- read controls readable properties
- write controls writeable properties
- execute controls executable methods and constructor
@since 2.1

    protected void setAttribute(Object object, Object attribute, Object value, JexlNode node) {
        // attempt to reuse last executor cached in volatile JexlNode.value
        if (node != null && cache) {
            Object cached = node.jjtGetValue();
            if (cached instanceof JexlPropertySet) {
                JexlPropertySet setter = (JexlPropertySet) cached;
                Object eval = setter.tryInvoke(object, attribute, value);
                if (!setter.tryFailed(eval)) {
                    return;
                }
            }
        }
        JexlException xjexl = null;
        JexlPropertySet vs = uberspect.getPropertySet(object, attribute, value, node);
        if (vs != null) {
            try {
                // cache executor in volatile JexlNode.value
                vs.invoke(object, value);
                if (node != null && cache && vs.isCacheable()) {
                    node.jjtSetValue(vs);
                }
                return;
            } catch (RuntimeException xrt) {
                if (node == null) {

View Full Code Here

        Script script = JEXL.createScript(expr);
        Object result;
        result = script.execute(null);
        assertEquals("42", ((Foo) result).getName());


        Sandbox sandbox = new Sandbox();
        sandbox.black(Foo.class.getName()).execute("");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr);

View Full Code Here

        Foo foo = new Foo("42");
        Object result;
        result = script.execute(null, foo);
        assertEquals(foo.Quux(), result);


        Sandbox sandbox = new Sandbox();
        sandbox.black(Foo.class.getName()).execute("Quux");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr, "foo");

View Full Code Here

        Foo foo = new Foo("42");
        Object result;
        result = script.execute(null, foo);
        assertEquals(foo.alias, result);


        Sandbox sandbox = new Sandbox();
        sandbox.black(Foo.class.getName()).read("alias");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr, "foo");

View Full Code Here

        Foo foo = new Foo("42");
        Object result;
        result = script.execute(null, foo, "43");
        assertEquals("43", result);


        Sandbox sandbox = new Sandbox();
        sandbox.black(Foo.class.getName()).write("alias");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr, "foo", "$0");

View Full Code Here

    public void testCtorWhite() throws Exception {
        String expr = "new('" + Foo.class.getName() + "', '42')";
        Script script;
        Object result;


        Sandbox sandbox = new Sandbox();
        sandbox.white(Foo.class.getName()).execute("");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr);

View Full Code Here

        Foo foo = new Foo("42");
        String expr = "foo.Quux()";
        Script script;
        Object result;


        Sandbox sandbox = new Sandbox();
        sandbox.white(Foo.class.getName()).execute("Quux");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr, "foo");

View Full Code Here

        Foo foo = new Foo("42");
        String expr = "foo.alias";
        Script script;
        Object result;


        Sandbox sandbox = new Sandbox();
        sandbox.white(Foo.class.getName()).read("alias");
        sandbox.get(Foo.class.getName()).read().alias("alias", "ALIAS");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr, "foo");

View Full Code Here

        Foo foo = new Foo("42");
        String expr = "foo.alias = $0";
        Script script;
        Object result;


        Sandbox sandbox = new Sandbox();
        sandbox.white(Foo.class.getName()).write("alias");
        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);


        script = sjexl.createScript(expr, "foo", "$0");

View Full Code Here

    }


    public void testRestrict() throws Exception {
        JexlContext context = new MapContext();
        context.set("System", System.class);
        Sandbox sandbox = new Sandbox();
        // only allow call to currentTimeMillis (avoid exit, gc, loadLibrary, etc)
        sandbox.white(System.class.getName()).execute("currentTimeMillis");
        // can not create a new file
        sandbox.black(java.io.File.class.getName()).execute("");


        Uberspect uber = new SandboxUberspectImpl(null, sandbox);
        JexlEngine sjexl = new JexlEngine(uber, null, null, null);
        sjexl.setStrict(true);

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.commons.jexl2.introspection.Sandbox

com.alibaba.citrus.expr.jexl.JexlExpression

com.catify.processengine.core.nodes.ExclusiveGatewayNode

com.catify.processengine.core.services.ExpressionService

com.commafeed.backend.service.FeedEntryFilteringService

com.googlecode.jmxtrans.model.naming.JexlNamingStrategy

com.tacitknowledge.flip.aspectj.JexlValueExpressionEvaluator

com.tacitknowledge.flip.model.FeatureCondition

io.covert.dns.extract.Extractor

io.covert.dns.filtering.Filter

org.apache.accumulo.examples.wikisearch.iterator.FieldIndexIterator

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.