vyommani opened a new pull request, #1283: URL: https://github.com/apache/ranger/pull/1283
## What changes were proposed in this pull request? RecordFilterJavaScript now uses a Graal.js engine with no host access (GraalScriptEngineCreator.createNoHostAccessScriptEngine()) and runs SCRIPT_SAFE_PREEXEC before the filter. The engine is closed after each evaluation. Removed the Nashorn fallback and the nashorn-core dependency. If Graal.js isn't available, evaluation fails with MaskingException. Removed the ranger.nestedstructure.recordfilter.js.allowHostAccess property. Behaviour change: row filters run as standard JavaScript. Nashorn-only syntax such as for each is rejected. ## How was this patch tested? all tests are green modify couple of tests to cover this change. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
