6d8c035f70
Closes #13854 Squashed commit of the following: commit 42c1166efc55adda0d13fed77de583c0973e44b3 Author: Robert Muir <rmuir@apache.org> Date: Tue Sep 29 11:59:43 2015 -0400 Add paranoia Groovy holds on to a classloader, so check it before compilation too. I have not reviewed yet what Rhino is doing, but just be safe. commit b58668a81428e964dd5ffa712872c0a34897fc91 Author: Robert Muir <rmuir@apache.org> Date: Tue Sep 29 11:46:06 2015 -0400 Add SpecialPermission to guard exceptions to security policy. In some cases (e.g. buggy cloud libraries, scripting engines), we must grant dangerous permissions to contained cases. Those AccessController blocks are dangerous, since they truncate the stack, and can allow privilege escalation. This PR adds a simple permission to check before each one, so that unprivileged code like groovy scripts, can't do anything they shouldn't be allowed to do otherwise. |
||
|---|---|---|
| .. | ||
| licenses | ||
| src | ||
| pom.xml | ||