This is an automated email from the ASF dual-hosted git repository.
henrib pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git
from bcd50796 Bump org.apache.commons:commons-parent from 103 to 104.
add 4c2a109c [JEXL-468] Harden introspection permissions and parser
feature enforcement
add 5f4c69ac [JEXL-468] Sandbox iterator gate, permission-parser polarity,
engine-compiler denial
add 759ebaa2 Apply suggestions from code review
new 8df14514 Merge pull request #410 from apache/JEXL-468
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../jexl3/internal/introspection/Permissions.java | 202 +++++++++++++++------
.../internal/introspection/PermissionsParser.java | 41 ++++-
.../internal/introspection/SandboxUberspect.java | 11 +-
.../jexl3/introspection/JexlPermissions.java | 65 +++++--
.../apache/commons/jexl3/parser/JexlParser.java | 10 +-
.../org/apache/commons/jexl3/parser/Parser.jjt | 5 +-
.../commons/jexl3/ComposePermissionsTest.java | 33 ++++
.../org/apache/commons/jexl3/Issues400Test.java | 17 +-
.../java/org/apache/commons/jexl3/JXLTTest.java | 8 +-
.../commons/jexl3/JxltFeatureEnforcementTest.java | 82 +++++++++
.../jexl3/internal/introspection/NoJexlTest.java | 30 ++-
.../introspection/PermissionsInitOrderTest.java | 127 +++++++++++++
.../PermissionsRestrictedSweepTest.java | 159 ++++++++++++++++
.../internal/introspection/PermissionsTest.java | 42 ++++-
.../commons/jexl3/introspection/SandboxTest.java | 28 +++
15 files changed, 772 insertions(+), 88 deletions(-)
create mode 100644
src/test/java/org/apache/commons/jexl3/JxltFeatureEnforcementTest.java
create mode 100644
src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsInitOrderTest.java
create mode 100644
src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsRestrictedSweepTest.java
