You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@groovy.apache.org by pa...@apache.org on 2020/06/19 01:10:45 UTC

[groovy] 02/02: GROOVY-9594: Update src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java (closes #1282)

This is an automated email from the ASF dual-hosted git repository.

paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git

commit 5a8e5b0cbb9c2edfa0c1b97a83dc8bab83e36116
Author: Paul King <pa...@asert.com.au>
AuthorDate: Thu Jun 18 22:09:12 2020 +1000

    GROOVY-9594: Update src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java (closes #1282)
    
    Co-authored-by: Jenn Strater <je...@gmail.com>
---
 .../codehaus/groovy/control/customizers/SecureASTCustomizer.java    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java b/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
index 7ea48e1..ad8ed7a 100644
--- a/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
+++ b/src/main/java/org/codehaus/groovy/control/customizers/SecureASTCustomizer.java
@@ -110,7 +110,7 @@ import java.util.Map;
  * out, but new language features are then implicitly also available and this may not be desirable.
  * The implication is that you might need to update your configuration with each new release.
  * <p>
- * If you set neither an allowed list nor a disallowed list, then everything is permitted.
+ * If neither an allowed list nor a disallowed list is set, then everything is permitted.
  * <p>
  * Combinations of import and star import constraints are authorized as long as you use the same type of list for both.
  * For example, you may use an import allowed list and a star import allowed list together, but you cannot use an import
@@ -761,10 +761,10 @@ public class SecureASTCustomizer extends CompilationCustomizer {
      *
      * Please note that since Groovy is a dynamic language, and
      * this class performs a static type check, it will be relatively
-     * simple to bypass any disallowed list unless the receivers disallowed list contains, at
+     * simple to bypass any disallowed list unless the disallowed receivers list contains, at
      * a minimum, Object, Script, GroovyShell, and Eval. Additionally,
      * it is necessary to also have MethodPointerExpression in the
-     * disallowed expressions list for the receivers disallowed list to function
+     * disallowed expressions list for the disallowed receivers list to function
      * as a security check.
      *
      * @param disallowedReceivers the list of refused classes, as fully qualified names