Re: [JEXL] Access to static methods?

2008-05-12 Thread Trevor Harrison
On Mon, May 12, 2008 at 7:35 AM, sebb [EMAIL PROTECTED] wrote: I see, thanks, very useful. Presumably Jexl has to be given class objects for any static methods it needs to call? Or are there any objects which are built-in to Jexl? Doesn't matter, you can get access to any objects you need

JEXL How to override the Uberspect?

2007-10-08 Thread Trevor Harrison
Does anyone know of a way to override the ubspect instance that is used during script execution? -Trevor - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: JEXL security issue with system properties

2007-10-05 Thread Trevor Harrison
Replying to myself: On 10/4/07, Trevor Harrison [EMAIL PROTECTED] wrote: While looking for other ways to 'break' out, I started thinking about classloaders. I haven't succeeded in getting a classloader yet in a script, but if I could, it would be bad for my intended usage of JEXL

JEXL security issue with system properties

2007-10-04 Thread Trevor Harrison
It seems like JEXL allows scripts to access some jvm system properties, via java.lang.Integer's getInteger( String sys_prop_name ) method: i = 0; j = i.getInteger(sun.arch.data.model); Getting the value of system properties that are completely numbers might not be that big of an issue, but it

JEXL multi-statements in expression

2007-10-03 Thread Trevor Harrison
I'm brand new to JEXL, and ran into something a little strange that took me quite a while to wrap my head around. I was playing around with different expressions to see what was valid, and ran into a problem with this: i = 0; while ( i 10 ) i = i + 1; which only executes the i = 0; and then

Re: JEXL multi-statements in expression

2007-10-03 Thread Trevor Harrison
Ah. Bangs head. Thanks. On 10/3/07, Rahul Akolkar [EMAIL PROTECTED] wrote: Use the ScriptFactory [1] instead. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]