RE: [JEXL] Detecting infinite loops in JEXL Scripts

2023-08-07 Thread Aditya Kumar1
Thanks, Henri, for a quick reply. Really appreciate it. - Aditya Kumar1 Technology Architect Precisely.com -Original Message- From: Henri Biestro Sent: Monday, August 7, 2023 5:09 PM To: dev@commons.apache.org Subject: Re: [JEXL] Detecting infinite loops in JEXL Scripts This message ori

Re: [VOTE] Release Apache Commons DbUtils 1.8.0 based on RC1

2023-08-07 Thread Bruno Kinoshita
+1 Build and tests running fine from the tag on Apache Maven 3.8.5 (3599d3414f046de2324203b78ddcf9b5e4388aa0) Maven home: /opt/apache-maven-3.8.5 Java version: 17.0.8, vendor: Private Build, runtime: /usr/lib/jvm/java-17-openjdk-amd64 Default locale: en_US, platform encoding: UTF-8 OS name: "linu

Re: [VOTE] Release Apache Commons DbUtils 1.8.0 based on RC1

2023-08-07 Thread Gary Gregory
Hi, It looks like your are a committer but are not on the PMC based on https://projects.apache.org/committee.html?commons meaning your vote is appreciated but not binding for the purpose of this vote. Thank you, Gary On Mon, Aug 7, 2023, 10:49 AM William Speirs wrote: > +1 if my vote still cou

Re: [VOTE] Release Apache Commons DbUtils 1.8.0 based on RC1

2023-08-07 Thread William Speirs
+1 if my vote still counts On Sat, Aug 5, 2023 at 4:29 PM Gary Gregory wrote: > Could I get more PMC reviews please? > > Gary > > On Tue, Aug 1, 2023, 8:40 PM Gary Gregory wrote: > > > We have fixed a few bugs and added some enhancements since Apache > > Commons DbUtils 1.7 was released, so I w

Re: [Meta] gitlab error responses to mailing list

2023-08-07 Thread Gilles Sadowski
Le lun. 7 août 2023 à 16:38, Gilles Sadowski a écrit : > > Le lun. 7 août 2023 à 10:46, Mark Thomas a écrit : > > > > Got the error message. To help me play hunt the subscriber, can anyone > > provide information on when this behaviour started? > > I got one on Saturday at 11:17, in a thread with

Re: [Meta] gitlab error responses to mailing list

2023-08-07 Thread Gilles Sadowski
Le lun. 7 août 2023 à 10:46, Mark Thomas a écrit : > > Got the error message. To help me play hunt the subscriber, can anyone > provide information on when this behaviour started? I got one on Saturday at 11:17, in a thread with [commons-math] Three Concerns as subject line. Content was: ---C

Re: [JEXL] Detecting infinite loops in JEXL Scripts

2023-08-07 Thread Henri Biestro
Ho: You should look at using JexlPermission which are probably easier and more powerful than the JexlSandbox to enforce application security. For loops, since there is no obvious guaranteed way to ensure they finish, the possible route is to let scripts run in threads and cancel them if they run

Re: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Henri Biestro
Of course we do. It seems the landing page / detailed example is still not steering users towards the Javadoc which anyhow is not the best media to explain 'how to' (imho). Transforming/extracting 'how to's from the unit tests could be the cheapest way to improve on this area. (As in: how do I i

[JEXL] Detecting infinite loops in JEXL Scripts

2023-08-07 Thread Aditya Kumar1
Hi, I am planning to use JEXL library in my SaaS based product to run JavaScripts/JexlScripts(I understand, Jexl is not exactly java script). Since, security is one of the most important requirements for any SaaS based product, I am going to use Jexl Sandbox and Jexl Features to secure my appl

RE: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Aditya Kumar1
Awesome. I was not aware of this I didn't find any reference to it. I tried this by adding the permissions in Java 11 and it works perfectly. Thanks Henri! - Aditya Kumar1 Technology Architect Precisely.com -Original Message- From: Henri Biestro Sent: Monday, August 7, 2023 3:16 PM To:

Re: [Meta] gitlab error responses to mailing list

2023-08-07 Thread Gary Gregory
At least 2 days ago on a thread called "[commons-lang] Comments on new FunctionUtils / nested lambda feature" Gary On Mon, Aug 7, 2023, 4:47 AM Mark Thomas wrote: > Got the error message. To help me play hunt the subscriber, can anyone > provide information on when this behaviour started? > > T

Re: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Gary Gregory
Do we need better documentation on the site? Gary On Mon, Aug 7, 2023, 5:45 AM Henri Biestro wrote: > Hi; > JEXL 3.3. has increased default security by restricting permissions to a > very narrow set of allowed classes. In your case, you need to allow JEXL to > introspect your package by configu

Re: Exposing my own/wrapper functions using JEXL

2023-08-07 Thread Henri Biestro
Hi; JEXL 3.3. has increased default security by restricting permissions to a very narrow set of allowed classes. In your case, you need to allow JEXL to introspect your package by configuring your permissions. Have a look at JexlPermissions javadoc for more explanations. On JEXL 3.3, with Java 1

Re: [Meta] gitlab error responses to mailing list

2023-08-07 Thread Mark Thomas
Got the error message. To help me play hunt the subscriber, can anyone provide information on when this behaviour started? Thanks, Mark On 07/08/2023 09:44, Mark Thomas wrote: ".invalid" is something that the ASF adds to addresses. See https://infra.apache.org/blog/dmarc_filtering_on_lists_

Re: [Meta] gitlab error responses to mailing list

2023-08-07 Thread Mark Thomas
".invalid" is something that the ASF adds to addresses. See https://infra.apache.org/blog/dmarc_filtering_on_lists_that.html Hopefully I'll get a similar error message from gitlab in response to this. I'll see if I can track down which mailing list subscriber is triggering it. Mark On 06/08