This is an automated email from the ASF dual-hosted git repository.

henrib pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git


The following commit(s) were added to refs/heads/master by this push:
     new 27cb3fe4 JEXL-457: checkstyle, release notes, changes;
27cb3fe4 is described below

commit 27cb3fe4a94a50fd644defded4a8b23ed6ee0946
Author: Henrib <[email protected]>
AuthorDate: Fri Mar 6 14:09:04 2026 +0100

    JEXL-457: checkstyle, release notes, changes;
---
 RELEASE-NOTES.txt                                                       | 1 +
 src/changes/changes.xml                                                 | 1 +
 .../apache/commons/jexl3/internal/introspection/PermissionsTest.java    | 2 +-
 3 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt
index 8861c1a3..bd0acd5b 100644
--- a/RELEASE-NOTES.txt
+++ b/RELEASE-NOTES.txt
@@ -15,6 +15,7 @@ Bugs Fixed in 3.6.3:
 ====================
 
 o JEXL-456:  Change in template parser behavior.
+o JEXL-457:  Reduce default exposure for RESTRICTED JexlPermissions
 
 
 Changes in 3.6.3:
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 2594bf7c..dda12fd6 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -30,6 +30,7 @@
         <release version="3.6.3" date="YYYY-MM-DD"
                  description="This is a feature and maintenance release. Java 
8 or later is required.">
             <!-- FIX -->
+            <action dev="henrib" type="fix" issue="JEXL-457" due-to="Daniil 
Averin">Reduce default exposure for RESTRICTED JexlPermissions</action>
             <action dev="henrib" type="fix" issue="JEXL-456" due-to="Vincent 
Bussol">Change in template parser behavior.</action>
             <!-- ADD -->
             <!-- UPDATE -->
diff --git 
a/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
 
b/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
index f2a99db7..2b60e9f6 100644
--- 
a/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
+++ 
b/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
@@ -565,7 +565,7 @@ class PermissionsTest {
                 script.execute(null);
                 Assertions.fail("should have thrown a permission exception");
             } catch (JexlException.Method exception) {
-                Assertions.assertTrue( exception.getMethod().contains("File"), 
"FileWriter::new should not be allowed");
+                Assertions.assertTrue(exception.getMethod().contains("File"), 
"FileWriter::new should not be allowed");
             }
         }
     }

Reply via email to