[GROOVY-11170] Fix edge cases for SecureASTCustomizer

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.0.0-alpha-2, 4.0.15, 3.0.20, 2.5.24
• Assignee: Paul King
• Reporter: Paul King
• Created: 08/Sep/23 05:55
• Updated: 18/Sep/23 10:08
• Resolved: 11/Sep/23 00:40

Description

There are a number of edge cases which don't work as expected. As one example,
if we set allowedReceiversClasses to String and have method calls allowed, then the script "1.plus(1)" is rejected as expected, but the following is not rejected:

static main(args) {
    1.plus(1)
}