This is an automated email from the ASF dual-hosted git repository.
henrib pushed a change to branch JEXL-465
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git
from b915e46d JEXL-465: checkstyle;
add 2d0bafe3 JEXL-465: harden permissions; improve docs and tests; -
tighten SECURE/RESTRICTED to deny file, env, loader, thread access; - add NONE
deny-all base and create() factory; - fix getClass() bypass in
Permissions.allow(Class,Method); - add JexlBuilder.setDefaultOptions(); - add
security disclaimer in package-info.java and site index; - raise coverage:
JexlConfigLoader option flags, LoggingPermissions;
No new revisions were added by this update.
Summary of changes:
pom.xml | 2 +-
.../java/org/apache/commons/jexl3/JexlBuilder.java | 16 +++
.../org/apache/commons/jexl3/JexlConfigLoader.java | 5 +-
.../org/apache/commons/jexl3/JexlFeatures.java | 2 +-
.../jexl3/internal/introspection/Permissions.java | 18 +--
.../jexl3/introspection/JexlPermissions.java | 97 ++++++++++++--
.../org/apache/commons/jexl3/package-info.java | 50 ++++++--
src/site/xdoc/index.xml | 24 +++-
.../org/apache/commons/jexl3/DefaultsTest.java | 45 +++++--
.../apache/commons/jexl3/JexlConfigLoaderTest.java | 142 ++++++++++++++++++---
.../commons/jexl3/LoggingPermissionsTest.java | 46 +++++++
.../internal/introspection/PermissionsTest.java | 88 +++++++++++++
12 files changed, 463 insertions(+), 72 deletions(-)
