search

jenkinsci / groovy-sandbox

(Deprecated) Compile-time transformer to run Groovy code in a restrictive sandbox
MIT License
122 stars 60 forks source link

Prevent exception from being thrown when calling sandbox-defined varargs constructors #68

Closed dwnusbaum closed 1 year ago

dwnusbaum commented 3 years ago

Fixes #67, which was caused by the fix for SECURITY-1754.

Just opening a quick draft PR for now showing how the problem could be fixed. We would need to do some more testing to make sure the change doesn't break the security fix before it could be merged.

dwnusbaum commented 1 year ago

I think this may be obsolete as of 520243213bcd8c81322e8e683daa8d555bb4f484, but I will need to check.

dwnusbaum commented 1 year ago

I confirmed that https://github.com/jenkinsci/groovy-sandbox/commit/520243213bcd8c81322e8e683daa8d555bb4f484 fixed the issue. I filed https://github.com/jenkinsci/groovy-sandbox/pull/95 just to add a test.