Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-16480

Add Class Filter to isolate Nashorn from java imports

    Details

    • Type: Improvement Improvement
    • Status: Resolved
    • Severity: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: 7.1
    • Fix Version/s: 7.3
    • Component/s: Automation

      Description

      Nashorn in Nuxeo should not allow java imports other than AutomationService.

      Add https://bugs.openjdk.java.net/browse/JDK-8043717 when jdk8u40 will be available in Oracle stable releases.

      Doc: https://docs.oracle.com/javase/8/docs/technotes/guides/scripting/nashorn/api.html#classfilter_introduction

        Issue Links

          Activity

          Hide
          Jenkins added a comment -

          SUCCESS: Integrated in nuxeo-distribution-master #3316
          NXP-16480: instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f)

          Show
          Jenkins added a comment - SUCCESS: Integrated in nuxeo-distribution-master #3316 NXP-16480 : instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f )
          Hide
          Jenkins added a comment -

          SUCCESS: Integrated in FT-nuxeo-master-webdriver-cap-tomcat #341
          NXP-16480: fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77)
          NXP-16480: instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f)

          Show
          Jenkins added a comment - SUCCESS: Integrated in FT-nuxeo-master-webdriver-cap-tomcat #341 NXP-16480 : fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77 ) NXP-16480 : instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f )
          Hide
          Jenkins added a comment -

          FAILURE: Integrated in nuxeo-master-fullbuild-part2-distribution-multios #1164
          NXP-16480:Add Nashorn class filter to restrict all java imports in scripts (vpasquier@nuxeo.com: 16498dc606652323648ba71f56b27ea734131ba9)
          NXP-16480: add jvm version checks to activate/deactivate Nashorn cache and class filter (vpasquier@nuxeo.com: 7f2ef30d5e8fbb0be581ab110b93d6b131dc8f2a)
          NXP-16480: fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77)
          NXP-16480: instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f)

          Show
          Jenkins added a comment - FAILURE: Integrated in nuxeo-master-fullbuild-part2-distribution-multios #1164 NXP-16480 :Add Nashorn class filter to restrict all java imports in scripts (vpasquier@nuxeo.com: 16498dc606652323648ba71f56b27ea734131ba9 ) NXP-16480 : add jvm version checks to activate/deactivate Nashorn cache and class filter (vpasquier@nuxeo.com: 7f2ef30d5e8fbb0be581ab110b93d6b131dc8f2a ) NXP-16480 : fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77 ) NXP-16480 : instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f )
          Hide
          Jenkins added a comment -

          SUCCESS: Integrated in FT-nuxeo-master-webdriver-cap-tomcat-win #1686
          NXP-16480: fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77)
          NXP-16480: instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f)

          Show
          Jenkins added a comment - SUCCESS: Integrated in FT-nuxeo-master-webdriver-cap-tomcat-win #1686 NXP-16480 : fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77 ) NXP-16480 : instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f )
          Hide
          Jenkins added a comment -

          FAILURE: Integrated in nuxeo-master-fullbuild-part1-multidb-windows #1232
          NXP-16480: fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77)
          NXP-16480: instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f)

          Show
          Jenkins added a comment - FAILURE: Integrated in nuxeo-master-fullbuild-part1-multidb-windows #1232 NXP-16480 : fix wrong compare for Nashorn jvm version checking (vpasquier@nuxeo.com: ece271b3efc69da01aa7e70e138abbabd821be77 ) NXP-16480 : instantiate script service within activate rather than scripting component init (vpasquier@nuxeo.com: 9517d291a4e9000e06ea29bf8ce331074385b96f )

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Agile