Manybubbles has uploaded a new change for review. https://gerrit.wikimedia.org/r/155066
Change subject: Loosen Elasticsearch's groovy sandbox slightly ...................................................................... Loosen Elasticsearch's groovy sandbox slightly Change-Id: I0de89fa9053b8e84aabaa004c6a9f39f21b40435 --- M puppet/modules/elasticsearch/files/elasticsearch.yml 1 file changed, 85 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/mediawiki/vagrant refs/changes/66/155066/1 diff --git a/puppet/modules/elasticsearch/files/elasticsearch.yml b/puppet/modules/elasticsearch/files/elasticsearch.yml index a261a50..e0479f0 100644 --- a/puppet/modules/elasticsearch/files/elasticsearch.yml +++ b/puppet/modules/elasticsearch/files/elasticsearch.yml @@ -1 +1,86 @@ script.disable_dynamic: false + + +# The default sandbox for Groovy is too restrictive for Cirrus. This adds a +# few more allowed invocations. +script.groovy.sandbox.class_whitelist: + #Defaults + - java.util.Date + - java.util.Map + - java.util.List + - java.util.Set + - java.util.ArrayList + - java.util.Arrays + - java.util.HashMap + - java.util.HashSet + - java.util.UUID + - java.math.BigDecimal + - org.joda.time.DateTime + - org.joda.time.DateTimeZone + - org.elasticsearch.common.joda.time.DateTime + - org.elasticsearch.common.joda.time.DateTimeZone + # Added for Cirrus + - java.util.Locale + - org.apache.lucene.util.automaton.RegExp + - org.apache.lucene.util.automaton.CharacterRunAutomaton +script.groovy.sandbox.package_whitelist: + # Defaults + - java.util + - java.lang + - org.joda.time + - org.elasticsearch.common.joda.time + # Added for Cirrus + - org.apache.lucene.util.automaton +script.groovy.sandbox.receiver_whitelist: + # Defaults + - java.lang.Math + - java.lang.Integer + - "[I" + - "[[I" + - "[[[I" + - java.lang.Float + - "[F" + - "[[F" + - "[[[F" + - java.lang.Double + - "[D" + - "[[D" + - "[[[D" + - java.lang.Long + - "[J" + - "[[J" + - "[[[J" + - java.lang.Short + - "[S" + - "[[S" + - "[[[S" + - java.lang.Character + - "[C" + - "[[C" + - "[[[C" + - java.lang.Byte + - "[B" + - "[[B" + - "[[[B" + - java.lang.Boolean + - "[Z" + - "[[Z" + - "[[[Z" + - java.math.BigDecimal + - java.util.Arrays + - java.util.Date + - java.util.List + - java.util.Map + - java.util.Set + - java.lang.Object + - org.joda.time.DateTime + - org.joda.time.DateTimeUtils + - org.joda.time.DateTimeZone + - org.joda.time.Instant + - org.elasticsearch.common.joda.time.DateTime + - org.elasticsearch.common.joda.time.DateTimeUtils + - org.elasticsearch.common.joda.time.DateTimeZone + - org.elasticsearch.common.joda.time.Instant + # Added for Cirrus + - org.apache.lucene.util.automaton.RegExp + - org.apache.lucene.util.automaton.CharacterRunAutomaton -- To view, visit https://gerrit.wikimedia.org/r/155066 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I0de89fa9053b8e84aabaa004c6a9f39f21b40435 Gerrit-PatchSet: 1 Gerrit-Project: mediawiki/vagrant Gerrit-Branch: master Gerrit-Owner: Manybubbles <[email protected]> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
