Uploaded image for project: 'Groovy'
  1. Groovy
  2. GROOVY-10931

Remove $getLookup method generation (Groovy 4+)

    XMLWordPrintableJSON

Details

    Description

      The new $getLookup() method was discussed somewhat in the comments of GROOVY-10273. Groovy 3 has had JEP 396 (illegal access enforcement) support backported to the invoke dynamic pathways, without $getLookup. So, I'd like to restart the discussion to find out if there are any illegal-access scenarios that Groovy 4 supports that don't have a test case in Groovy 3. And if there are no scenarios that remain, I'd like to propose the removal of $getLookup method generation.

      I have disabled its generation in the Groovy 5 codebase, and there are no tests that fail. So I have good confidence that it can be removed and the security hole can be plugged.

      Attachments

        Issue Links

          Activity

            People

              emilles Eric Milles
              emilles Eric Milles
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: