You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@unomi.apache.org by sh...@apache.org on 2020/11/16 12:17:43 UTC
[unomi] branch master updated (dbcb2ed -> bc208d5)
This is an automated email from the ASF dual-hosted git repository.
shuber pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/unomi.git.
from dbcb2ed UNOMI-399: fix the loading of MVEL allowed script pattern from config, and return null during script execution if the script is filtered out (#211)
add bc208d5 UNOMI-399: load allow/forbid script from files instead of configuration property to avoid script code conflicting with property value parsing (#213)
No new revisions were added by this update.
Summary of changes:
.../main/resources/etc/custom.system.properties | 8 ++--
.../src/main/resources/etc/mvel-allow.json | 0
package/src/main/resources/etc/mvel-forbid.json | 19 ++++++++
.../src/main/resources/etc/ognl-allow.json | 0
package/src/main/resources/etc/ognl-forbid.json | 19 ++++++++
scripting/pom.xml | 5 +++
.../internal/ExpressionFilterFactoryImpl.java | 51 +++++++++-------------
7 files changed, 67 insertions(+), 35 deletions(-)
copy scripting/src/main/resources/META-INF/cxs/expressions/ognl.json => package/src/main/resources/etc/mvel-allow.json (100%)
create mode 100644 package/src/main/resources/etc/mvel-forbid.json
copy scripting/src/main/resources/META-INF/cxs/expressions/ognl.json => package/src/main/resources/etc/ognl-allow.json (100%)
create mode 100644 package/src/main/resources/etc/ognl-forbid.json