You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@groovy.apache.org by pa...@apache.org on 2020/06/19 01:10:45 UTC
[groovy] 02/02: GROOVY-9594: Update
src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
(closes #1282)
This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git
commit 5a8e5b0cbb9c2edfa0c1b97a83dc8bab83e36116
Author: Paul King <pa...@asert.com.au>
AuthorDate: Thu Jun 18 22:09:12 2020 +1000
GROOVY-9594: Update src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java (closes #1282)
Co-authored-by: Jenn Strater <je...@gmail.com>
---
.../codehaus/groovy/control/customizers/SecureASTCustomizer.java | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java b/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
index 7ea48e1..ad8ed7a 100644
--- a/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
+++ b/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
@@ -110,7 +110,7 @@ import java.util.Map;
* out, but new language features are then implicitly also available and this may not be desirable.
* The implication is that you might need to update your configuration with each new release.
* <p>
- * If you set neither an allowed list nor a disallowed list, then everything is permitted.
+ * If neither an allowed list nor a disallowed list is set, then everything is permitted.
* <p>
* Combinations of import and star import constraints are authorized as long as you use the same type of list for both.
* For example, you may use an import allowed list and a star import allowed list together, but you cannot use an import
@@ -761,10 +761,10 @@ public class SecureASTCustomizer extends CompilationCustomizer {
*
* Please note that since Groovy is a dynamic language, and
* this class performs a static type check, it will be relatively
- * simple to bypass any disallowed list unless the receivers disallowed list contains, at
+ * simple to bypass any disallowed list unless the disallowed receivers list contains, at
* a minimum, Object, Script, GroovyShell, and Eval. Additionally,
* it is necessary to also have MethodPointerExpression in the
- * disallowed expressions list for the receivers disallowed list to function
+ * disallowed expressions list for the disallowed receivers list to function
* as a security check.
*
* @param disallowedReceivers the list of refused classes, as fully qualified names