[GitHub] [shenyu] li-keguo commented on pull request #4606: 【Type:feature 】The SPEL in the mock plugin is secure by default

["li-keguo (via GitHub)" <gi...@apache.org>]

li-keguo commented on PR #4606:
URL: https://github.com/apache/shenyu/pull/4606#issuecomment-1532829723

   > Well done! maybe standardSPELExpression can completely replace old one . I think we can remove old one. Have you ever try `MethodSecurityEvaluationContext`. are threre any differences between `StandardEvaluationContext` and `MethodSecurityEvaluationContext`?
   
   The original has been replaced with a secure implementation. see https://docs.spring.io/spring-framework/docs/5.0.6.RELEASE/javadoc-api/org/springframework/expression/spel/support/SimpleEvaluationContext.html
   
   StandardExpressionGenerator is not loaded by default and needs to be enabled by the user.
   
   Without studying the MethodSecurityEvaluationContext, but only providing some clues, he came from spring-security.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@shenyu.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org