H ,
I have a class shutter set on the context like this.
cx.setClassShutter(new ClassShutter() {
public boolean visibleToScripts(String className) {
return (className.equals
("org.mozilla.javascript.EvaluatorException") ;
}
});
I am getting org.mozilla.javascript.EvaluatorException: Access to
Java class "java.lang.Object" is prohibited from the JS when I tr to
execute the script.
If I add
/*|| className.startsWith( "java.lang.Object") */ )
This exception goes away. But is it safe to expose java.lang.object
from the class shutter? Will it cause any vulnerability?
IS there any other way to avoid this?
Thanks
_______________________________________________
dev-tech-js-engine-rhino mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-js-engine-rhino
