dajiaohuang opened a new pull request, #71: URL: https://github.com/apache/velocity-engine/pull/71
Fixes VELOCITY-1003. `SecureIntrospectorImpl` already permits `Class.getName()` for templates. Permit the corresponding simple-name lookup as well, while leaving the other `Class` methods restricted. Update the `SecureUberspector` documentation and cover `$n.getClass().getSimpleName()` in the existing security regression test. Validation on native Windows 10 x64 with JDK 26.0.2 and Apache Maven 3.9.11, using a task-local Maven repository: `mvn -B -s <task-local-settings> -Dmaven.repo.local=<task-local-repository> -Duser.home=<task-local-home> -pl velocity-engine-core -am -Dtest=SecureIntrospectionTestCase test` — 8 tests passed. AI assistance disclosure: This contribution was prepared with material assistance from an AI coding agent. I reviewed the change and take responsibility for the submitted contribution. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
