jakarta-bsf-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mike Blan <bla...@us.ibm.com>
Subject Re: BSF with Rhino, Java 2 Security problem
Date Sun, 04 Mar 2007 02:27:07 GMT

I will post this in case anyone else runs into same. This worked for my
application.

See   https://bugzilla.mozilla.org/show_bug.cgi?id=190841#c3 bugzilla 

In   cookxml.cookjs.util.ProxyHandler.invoke(...)

			// return JavaAdapter.callMethod (m_delegate, function, args,
convertionMask);
			// JavaAdapter.callMethod in Rhino 1.6.4 requires at least a null factory
reference.
			ContextFactory factory = null;
			return JavaAdapter.callMethod(factory, m_delegate, function, args,
convertionMask);

In  org.apache.bsf.engines.javascript.JavaScriptEngine.call(...)  and
eval(...) 

            cx.setOptimizationLevel(-1);
            cx.setGeneratingDebug(false);
            cx.setGeneratingSource(false);
            //cx.setOptimizationLevel(0); 
            cx.setDebugger(null, null);
            // Mozilla Bug 190841 – Generated classes have too low
privileges 
            ProxyJavaAdapter.init (cx, global, true);
            
            retval =
                ((Function) fun).call(cx, global, global, args);



-- 
View this message in context: http://www.nabble.com/BSF-with-Rhino%2C-Java-2-Security-problem-tf3306796.html#a9292215
Sent from the BSF - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: bsf-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: bsf-user-help@jakarta.apache.org


Mime
View raw message