You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Bertrand Delacretaz (JIRA)" <ji...@apache.org> on 2008/11/20 14:54:44 UTC
[jira] Created: (SLING-740) javashell sample
javashell sample
----------------
Key: SLING-740
URL: https://issues.apache.org/jira/browse/SLING-740
Project: Sling
Issue Type: Improvement
Components: Samples
Reporter: Bertrand Delacretaz
Priority: Minor
I have created a sample app named "javashell" that allows for executing java code snippets stored in repository nodes.
The app provides a few simple JCR samples, and a user interface to edit them.
I'll commit that under samples/javashell.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-740) javashell sample
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-740?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12649373#action_12649373 ]
Bertrand Delacretaz commented on SLING-740:
-------------------------------------------
Forgot to mention that there's no security w.r.t snippets code.
System.exit(0), for example, works nicely ;-)
> javashell sample
> ----------------
>
> Key: SLING-740
> URL: https://issues.apache.org/jira/browse/SLING-740
> Project: Sling
> Issue Type: Improvement
> Components: Samples
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Attachments: javashell-example.jpg
>
>
> I have created a sample app named "javashell" that allows for executing java code snippets stored in repository nodes.
> The app provides a few simple JCR samples, and a user interface to edit them.
> I'll commit that under samples/javashell.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-740) javashell sample
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-740?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12649380#action_12649380 ]
Bertrand Delacretaz commented on SLING-740:
-------------------------------------------
> Forgot to mention that there's no security w.r.t snippets code.
> Well, this is of course the same issue with traditional scripting. E.g. you could
> System.exit(0) in any JSP or java.lang.System.exit(0) in any ECMAScript...
Of course, but with javashell one can edit code directly from a browser, and the code runs with the privileges of the Sling server application.
> javashell sample
> ----------------
>
> Key: SLING-740
> URL: https://issues.apache.org/jira/browse/SLING-740
> Project: Sling
> Issue Type: Improvement
> Components: Samples
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Attachments: javashell-example.jpg
>
>
> I have created a sample app named "javashell" that allows for executing java code snippets stored in repository nodes.
> The app provides a few simple JCR samples, and a user interface to edit them.
> I'll commit that under samples/javashell.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (SLING-740) javashell sample
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bertrand Delacretaz updated SLING-740:
--------------------------------------
Attachment: javashell-example.jpg
Screenshot of a javashell page, http://localhost:8888/content/javashell/scripts/simple_sql_search.html
The left menu allows code to be edited, new code snippets to be created, and navigates within existing snippets
> javashell sample
> ----------------
>
> Key: SLING-740
> URL: https://issues.apache.org/jira/browse/SLING-740
> Project: Sling
> Issue Type: Improvement
> Components: Samples
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Attachments: javashell-example.jpg
>
>
> I have created a sample app named "javashell" that allows for executing java code snippets stored in repository nodes.
> The app provides a few simple JCR samples, and a user interface to edit them.
> I'll commit that under samples/javashell.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (SLING-740) javashell sample
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bertrand Delacretaz closed SLING-740.
-------------------------------------
Resolution: Fixed
Sample app committed in revision 719230, see http://svn.apache.org/repos/asf/incubator/sling/trunk/samples/javashell/README.txt for how to use it.
Contributions are welcome for more exciting JCR and Sling code snippets, though we might need to improve the navigation (tag-based?) if adding more snippets.
> javashell sample
> ----------------
>
> Key: SLING-740
> URL: https://issues.apache.org/jira/browse/SLING-740
> Project: Sling
> Issue Type: Improvement
> Components: Samples
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Attachments: javashell-example.jpg
>
>
> I have created a sample app named "javashell" that allows for executing java code snippets stored in repository nodes.
> The app provides a few simple JCR samples, and a user interface to edit them.
> I'll commit that under samples/javashell.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-740) javashell sample
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-740?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12649378#action_12649378 ]
Felix Meschberger commented on SLING-740:
-----------------------------------------
> Forgot to mention that there's no security w.r.t snippets code.
Well, this is of course the same issue with traditional scripting. E.g. you could System.exit(0) in any JSP or java.lang.System.exit(0) in any ECMAScript...
But then, accessing to creating scripts is generally limited, while this of course opens all doors ....
And System.exit(0) is not even the worst case scenario: Imagine
Runtime.getRuntime().exec("rm -rf /")
> javashell sample
> ----------------
>
> Key: SLING-740
> URL: https://issues.apache.org/jira/browse/SLING-740
> Project: Sling
> Issue Type: Improvement
> Components: Samples
> Reporter: Bertrand Delacretaz
> Priority: Minor
> Attachments: javashell-example.jpg
>
>
> I have created a sample app named "javashell" that allows for executing java code snippets stored in repository nodes.
> The app provides a few simple JCR samples, and a user interface to edit them.
> I'll commit that under samples/javashell.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.