Henri Biestro created JEXL-457:
----------------------------------
Summary: RESTRICTED permissions should further reduce exposure
Key: JEXL-457
URL: https://issues.apache.org/jira/browse/JEXL-457
Project: Commons JEXL
Issue Type: Improvement
Affects Versions: 3.6.2
Reporter: Henri Biestro
The current permissions in RESTRICTED are allowing too many packages for newer
jdks (java.lang.* sub packages in java 25 for instance).
The permissions themselves should also ensure that a constructor is explicitly
allowed (even transitively).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
