Details
-
Type:
Improvement
-
Status: Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 2.7
-
Component/s: Command Line Interface, Scriptable API
-
Labels:None
Description
The groovy command line argument only supports execution from STDIN or a file. It needs to be extended to support execution of scripts from URLs.
With this improvement comes a security concern - scripts retrieved from a URL ought to be sandboxed to ensure the local filesystem can't be corupted by malicious code.
With this improvement comes a security concern - scripts retrieved from a URL ought to be sandboxed to ensure the local filesystem can't be corupted by malicious code.
Attachments
Issue Links
- blocks
-
JAL-900 groovy scripts executed from a URL are not run in a security sandbox
-
- Open
-