groovy-sandbox icon indicating copy to clipboard operation
groovy-sandbox copied to clipboard

(Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox

Results 19 groovy-sandbox issues
Sort by recently updated
recently updated
newest added

Bumps [jenkins](https://github.com/jenkinsci/pom) from 1.76 to 1.86. Release notes Sourced from jenkins's releases. 1.86 🐛 Bug fixes Add JUnit 4.x to dependency management (#301) @​jetersen 👻 Maintenance Add correct archive URLs...

dependencies
java

Fixes #67, which was caused by the fix for SECURITY-1754. Just opening a quick draft PR for now showing how the problem could be fixed. We would need to do...

Fixes #59. See explanation of the bug/fix [here](https://github.com/jenkinsci/groovy-sandbox/issues/59#issuecomment-576414147).

Bumps [git-changelist-maven-extension](https://github.com/jenkinsci/incrementals-tools) from 1.3 to 1.4. Release notes Sourced from git-changelist-maven-extension's releases. 1.4 What's Changed avoid trailing underscore by @​jetersen in jenkinsci/incrementals-tools#31 Full Changelog: https://github.com/jenkinsci/incrementals-tools/compare/parent-1.3...parent-1.4 Commits 22b831a [maven-release-plugin] prepare release...

dependencies
java

Hi, I have the following sample code which works fine when running it in a groovy class: ```groovy char somec = 'a' def list = new ArrayList() list.add('dew') list.add('eff') list.add('fde')...

bug

I have script-security-plugin version 1.76 installed which depends on groovy-sandbox version 1.26. I started seeing the below exception in my pipeline after some recent updates and not sure exactly which...

I have a groovy script below which fails with the StackOverflowError ``` User user = new User(); user.setLoginName("abdc"); // This is ok. user.getLoginName(); // This line throw error class User...

bug

Consider the following test: ```void testBlah() { interceptedEval("'blah'.toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()" + ".toString().toString().toString().toString().toString().toString()"...

The SandboxTransformer does not support "tuple" assignment ([object destructuring with multiple assignment](http://groovy-lang.org/semantics.html#_object_destructuring_with_multiple_assignment)), as per the following: https://github.com/jenkinsci/groovy-sandbox/blob/01744ccb8f4e5fefe1ff48b3258fa6905583a46c/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java#L729 Is there any plan to implement this?

If I have nested Closures and I try to access something from the outside Closure I will run into a problem as it is only checking the functions from the...