« Return to Thread: Can I disable the ability to call java code from rhino?

Re: Can I disable the ability to call java code from rhino?

by Keithgchapman :: Rate this Message:

Hi Norris,

I did implement this interface as follows

public class ClassShutterImpl implements ClassShutter {
public boolean visibleToScripts(String fullClassName) {
// For the moment we dont allow to execute java code
return fullClassName.startsWith("org.mozilla.javascript");
}
}

and set this in the context. When i execute the following script

function foo(){
x = 10;
}
java.lang.System.exit(0);

I get this error, Is there a way that I can throw a more meaningfull
error. May be something like "sorry we do not allow you to run Java
code through LiveConnect".

caused org.mozilla.javascript.EcmaError: TypeError: exit is not a
function, it is org.mozilla.javascript.NativeJavaPackage. (test#4)

Is there a better way I can do this?

thanks,
Keith.

On Jan 22, 11:54 pm, Norris Boyd <norrisb...@...> wrote:

> On Jan 22, 5:07 am, keith <keithgchap...@...> wrote:
>
> > Hi,
>
> > I understand that I can call Java code directly from Within Rhino. Is
> > there a configuration setting or something that can disable this
> > feature?
>
> > for e.g I dont want a script having
> > java.lang.System.exit(0);
> > bring down the whole system. Is there anyway I can control this.
>
> > Thanks,
> > Keith.
>
> (Please use mozilla.dev.tech.js-engine.rhino in the future.)
>
> Take a look at the following method and class:
>
> http://www.mozilla.org/rhino/apidocs/org/mozilla/javascript/Context.h...)http://www.mozilla.org/rhino/apidocs/org/mozilla/javascript/ClassShut...
>
> --N

_______________________________________________
dev-tech-js-engine mailing list
dev-tech-js-engine@...
https://lists.mozilla.org/listinfo/dev-tech-js-engine

« Return to Thread: Can I disable the ability to call java code from rhino?