Re: [Beanshell-dev] Groovy?

Pat <[email protected]>
Newsgroups gmane.comp.java.beanshell.user,gmane.comp.java.beanshell.devel
Message-ID <[email protected]>
On Fri, Jan 30, 2004 at 03:21:49PM -0500, Mark Swanson wrote:
> 
> I like performance too, but I do require BeanShell to work in a secure 
> unsigned environment (JWS) that can't create a ClassLoader. I hope BeanShell 
> can be structured in such a way that it can do all of the performance 
> enhancements necessary yet still work fine (and slower) if a specific 
> ClassLoader can not be created. It seems to be structured that way right now 
> - but I can't test that theory as BeanShell doesn't work in an unsigned JWS 
> environment atm (nudge nudge) :-)

Yah, sorry I haven't had a chance to look into that.  I suspect that whatever
is broken and keeping the current version(s) from working in an applet is minor
and can be easily worked out...

I believe one issue is that the reflection code uses getDeclaredMethods()
indescriminantly and that's a security problem.  That should be isolated to one
spot though...  There may also be some calls to check system properties that
need to catch security exceptions.


Pat


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.