mirror of
https://github.com/honeymoose/OpenSearch.git
synced 2025-03-09 14:34:43 +00:00
f0733bd829
I want to refactor scripting engines so we can contain dangerous "God-like" permissions like createClassloader/sun.reflect. These are used for dynamic class generation (scripts, mocks). This will mean some refactoring to ES core. But first lets get the plugins in order first. I removed those permissions globally, and fixed grants for lang-javascript, lang-python, securemock so that everything works. lang-javascript needs no code changes, because rhino is properly written :) lang-python needs accesscontroller blocks. securemock was already working as of 1.1 This is just a baby step, to try to do some of this incrementally! It doesn't yet provide us anything.