jenkinsci / groovy-sandbox

(Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox
MIT License
122 stars 60 forks source link

[JENKINS-50470] Treat checkedGetProperty for collection as spread #46

Closed abayer closed 6 years ago

abayer commented 6 years ago

JENKINS-50470

This is how Groovy's own MetaClassImpl.getProperty works for Collections, so we should do the same thing.

Note that we can't actually replicate the error case in groovy-sandbox tests, just the bad interceptor trace. The actual testing of the error case is downstream in script-security.

@reviewbybees