[logback-dev] [JIRA] (LOGBACK-1606) Bring Back Groovy Config and use SecureASTCustomizer to secure it

[QOS.CH (JIRA)]

Title: Message Title

Tucker J Pelletier commented on LOGBACK-1606   Re: Bring Back Groovy Config and use SecureASTCustomizer to secure it It was less effort that you think I've played with the SecureASTCustomizer a few times before. Although I did figure out a way to close a security hole with annotations, that I was previously unaware of. Ok great than I can use gradle for the "module". The only reason I mentioned maven modules was because I notice that the project used maven and did a quick google search to see if maven modules were a thing, but that's irreverent to the main goal. Good I'll take a closer look at that code and port it into a separate project. I'll probably see about doing that this weekend, and see how far I get. Good to know. I'll clone the project locally so I can play with that. So I guess I could use the latest tag and pull back the changes from history for the hook for ContextInitializer.autoConfig()? Unless you want to create a branch that has that change? Once I have everything together and I think it's working, I'll ping a few people in the Groovy/Grails community, to see if they would be willing to review it and see if there is anything I didn't think of.   Add Comment   This message was sent by Atlassian Jira (v8.8.0#808000-sha1:e2c7e59)

_______________________________________________
logback-dev mailing list
logback-dev@qos.ch
http://mailman.qos.ch/mailman/listinfo/logback-dev