File tree Expand file tree Collapse file tree 1 file changed +1
-3
lines changed
java/ql/src/experimental/Security/CWE/CWE-094 Expand file tree Collapse file tree 1 file changed +1
-3
lines changed Original file line number Diff line number Diff line change @@ -31,15 +31,13 @@ The next example shows how an untrusted JEXL expression can be run
3131in a sandbox that allows accessing only methods in the <code >java.lang.Math</code > class.
3232The sandbox is implemented using <code >JexlSandbox</code > class that is provided by
3333Apache Commons JEXL 3.
34- However, it's recommended to avoid using untrusted input in JEXL expressions.
3534</p >
3635<sample src =" SaferJexlExpressionEvaluationWithSandbox.java" />
3736
3837<p >
3938The next example shows another way how a sandbox can be implemented.
40- It uses a custom implememtation of <code >JexlUberspect</code >
39+ It uses a custom implementation of <code >JexlUberspect</code >
4140that checks if callees are instances of allowed classes.
42- Again, it's recommended to avoid using untrusted input in JEXL expressions.
4341</p >
4442<sample src =" SaferJexlExpressionEvaluationWithUberspectSandbox.java" />
4543</example >
You can’t perform that action at this time.
0 commit comments