Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-43482

security sandbox disallows method calls on groovy objects

    • Icon: Bug Bug
    • Resolution: Not A Defect
    • Icon: Minor Minor
    • script-security-plugin
    • None
    • jenkisn 2.19.4
      script-security 1.27

      class Foo {
          String bar() {
              "baz"
          }
      }
      
      def f = new Foo()
      echo f.bar

      fails with:

      org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use method groovy.lang.GroovyObject getProperty java.lang.String (Foo.bar)
      	at org.jenkinsci.plugins.scriptsecurity.sandbox.whitelists.StaticWhitelist.rejectMethod(StaticWhitelist.java:183)
      

          [JENKINS-43482] security sandbox disallows method calls on groovy objects

          This was a ID10T error being masked by a the confusing security sandbox whitelist expection. Per abayer, the method invocation requires `()`s.

          Joshua Hoblitt added a comment - This was a ID10T error being masked by a the confusing security sandbox whitelist expection. Per abayer , the method invocation requires `()`s.

            Unassigned Unassigned
            jhoblitt Joshua Hoblitt
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: