[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16036421#comment-16036421 ] ASF GitHub Bot commented on GROOVY-8163: Github user asfgit closed the pull request at:

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16027609#comment-16027609 ] Dimitry Polivaev commented on GROOVY-8163: -- Could you please check the changes I implemented

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16014646#comment-16014646 ] Dimitry Polivaev commented on GROOVY-8163: -- The catch is needed to make the above test

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16014645#comment-16014645 ] ASF GitHub Bot commented on GROOVY-8163: Github user dpolivaev commented on a diff in the pull

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16014586#comment-16014586 ] John Wagenleitner commented on GROOVY-8163: --- My hunch is that a {{GroovyRuntimeException}}

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16009695#comment-16009695 ] Dimitry Polivaev commented on GROOVY-8163: -- Need for patching {{MetaClassImpl}} if

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16009515#comment-16009515 ] John Wagenleitner commented on GROOVY-8163: --- By wrapping the {{Eval}} in the {{doPrivileged}}

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16009412#comment-16009412 ] Jochen Theodorou commented on GROOVY-8163: -- +1 > Groovy scripts can disable java security

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16009353#comment-16009353 ] Dimitry Polivaev commented on GROOVY-8163: -- [~blackdrag] I would appreciate any feedback about

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15991521#comment-15991521 ] Dimitry Polivaev commented on GROOVY-8163: -- Protected class loader methods can be accessed by

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15991518#comment-15991518 ] ASF GitHub Bot commented on GROOVY-8163: GitHub user dpolivaev opened a pull request:

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15990743#comment-15990743 ] Jochen Theodorou commented on GROOVY-8163: -- I think the idea of the patch is good and we should

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15990693#comment-15990693 ] Dimitry Polivaev commented on GROOVY-8163: -- [~glaforge] Hello Guillaume, because I have got no

[jira] [Commented] (GROOVY-8163) Groovy scripts can disable java security manager and escape sandbox

[ https://issues.apache.org/jira/browse/GROOVY-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15980352#comment-15980352 ] Guillaume Laforge commented on GROOVY-8163: --- Can you give a bit more details? Steps to