File tree Expand file tree Collapse file tree 1 file changed +1
-3
lines changed
java/ql/src/experimental/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +1
-3
lines changed Original file line number Diff line number Diff line change @@ -31,15 +31,13 @@ The next example shows how an untrusted JEXL expression can be run
31
31
in a sandbox that allows accessing only methods in the <code >java.lang.Math</code > class.
32
32
The sandbox is implemented using <code >JexlSandbox</code > class that is provided by
33
33
Apache Commons JEXL 3.
34
- However, it's recommended to avoid using untrusted input in JEXL expressions.
35
34
</p >
36
35
<sample src =" SaferJexlExpressionEvaluationWithSandbox.java" />
37
36
38
37
<p >
39
38
The next example shows another way how a sandbox can be implemented.
40
- It uses a custom implememtation of <code >JexlUberspect</code >
39
+ It uses a custom implementation of <code >JexlUberspect</code >
41
40
that checks if callees are instances of allowed classes.
42
- Again, it's recommended to avoid using untrusted input in JEXL expressions.
43
41
</p >
44
42
<sample src =" SaferJexlExpressionEvaluationWithUberspectSandbox.java" />
45
43
</example >
You can’t perform that action at this time.
0 commit comments