Henri Biestro created JEXL-452:
----------------------------------

             Summary: Debug setting in Engine shows class/method/line even when 
set to false
                 Key: JEXL-452
                 URL: https://issues.apache.org/jira/browse/JEXL-452
             Project: Commons JEXL
          Issue Type: Bug
    Affects Versions: 3.6.0
            Reporter: Henri Biestro
            Assignee: Henri Biestro
             Fix For: 3.6.1


The purpose of the Engine debug flag is controlling whether class/method/line 
information due to exceptions or errors will appear; this can be considered 
dangerous for the vulnerability-anxious and setting it to false will avoid 
generating such info.
It is no longer completely functional for scripts since a default JexlInfo - 
which captures the caller location - is created by the parser if lacking.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to