This is an automated email from the ASF dual-hosted git repository.
henrib pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jexl.git
The following commit(s) were added to refs/heads/master by this push:
new 27cb3fe4 JEXL-457: checkstyle, release notes, changes;
27cb3fe4 is described below
commit 27cb3fe4a94a50fd644defded4a8b23ed6ee0946
Author: Henrib <[email protected]>
AuthorDate: Fri Mar 6 14:09:04 2026 +0100
JEXL-457: checkstyle, release notes, changes;
---
RELEASE-NOTES.txt | 1 +
src/changes/changes.xml | 1 +
.../apache/commons/jexl3/internal/introspection/PermissionsTest.java | 2 +-
3 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt
index 8861c1a3..bd0acd5b 100644
--- a/RELEASE-NOTES.txt
+++ b/RELEASE-NOTES.txt
@@ -15,6 +15,7 @@ Bugs Fixed in 3.6.3:
====================
o JEXL-456: Change in template parser behavior.
+o JEXL-457: Reduce default exposure for RESTRICTED JexlPermissions
Changes in 3.6.3:
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 2594bf7c..dda12fd6 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -30,6 +30,7 @@
<release version="3.6.3" date="YYYY-MM-DD"
description="This is a feature and maintenance release. Java
8 or later is required.">
<!-- FIX -->
+ <action dev="henrib" type="fix" issue="JEXL-457" due-to="Daniil
Averin">Reduce default exposure for RESTRICTED JexlPermissions</action>
<action dev="henrib" type="fix" issue="JEXL-456" due-to="Vincent
Bussol">Change in template parser behavior.</action>
<!-- ADD -->
<!-- UPDATE -->
diff --git
a/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
b/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
index f2a99db7..2b60e9f6 100644
---
a/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
+++
b/src/test/java/org/apache/commons/jexl3/internal/introspection/PermissionsTest.java
@@ -565,7 +565,7 @@ class PermissionsTest {
script.execute(null);
Assertions.fail("should have thrown a permission exception");
} catch (JexlException.Method exception) {
- Assertions.assertTrue( exception.getMethod().contains("File"),
"FileWriter::new should not be allowed");
+ Assertions.assertTrue(exception.getMethod().contains("File"),
"FileWriter::new should not be allowed");
}
}
}