Restrict JavaScript Engine to allow running untrusted scripts for user-driven
templating
----------------------------------------------------------------------------------------
Key: SLING-524
URL: https://issues.apache.org/jira/browse/SLING-524
Project: Sling
Issue Type: New Feature
Components: Scripting
Affects Versions: 2.0.1
Reporter: Lars Trieloff
If you want to allow users to run custom scripts inside sling, for instance to
allow them to theme personal websites or blogs it is necessary to restrict the
capabilities of the scripting environment so that users do not run scripts that
access system files, run resource-draining scripts or harm the system in other
ways.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.