[
https://issues.apache.org/jira/browse/TINKERPOP-891?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15954163#comment-15954163
]
ASF GitHub Bot commented on TINKERPOP-891:
------------------------------------------
Github user spmallette commented on the issue:
https://github.com/apache/tinkerpop/pull/179
That's a reasonable example. Could someone not just "blacklist" by
whitelisting though? I just mean that the whitelisting system is all regex
based. You could add negation to the whitelist and get rid of your troublesome
method:
```text
java\.lang\.Boolean\#(?!getBoolean\(String\)).*
```
That allows everything else on `Boolean` except `getBoolean(String)`.
> Re-examine Sandboxing Abstractions
> ----------------------------------
>
> Key: TINKERPOP-891
> URL: https://issues.apache.org/jira/browse/TINKERPOP-891
> Project: TinkerPop
> Issue Type: Improvement
> Components: groovy
> Affects Versions: 3.0.2-incubating
> Reporter: stephen mallette
> Assignee: stephen mallette
> Priority: Minor
> Fix For: 3.1.1-incubating
>
>
> The sandboxing abstractions are not so good a set of building blocks as I'd
> once thought. Helper methods aren't in the right places and more flexibilty
> is required in managing methods/variables than just simple filters. Need to
> develop more concrete actions on this still.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
