kyakdan commented on code in PR #26:
URL: https://github.com/apache/commons-jxpath/pull/26#discussion_r1005164446
##########
src/test/java/org/apache/commons/jxpath/ri/compiler/ExtensionFunctionTest.java:
##########
@@ -46,9 +46,11 @@ public class ExtensionFunctionTest extends JXPathTestCase {
private JXPathContext context;
private TestBean testBean;
private TypeConverter typeConverter;
+ private final String DEFAULT_ALLOW_LIST =
"org.w3c.*,org.jdom.*,java.lang.String,java.util.*,org.apache.commons.*";
Review Comment:
@garydgregory Is there a default secure alow list that you can provide?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@commons.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
