[JEXL-219] Blacklist by default in sandbox

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0
• Fix Version/s: 3.1
• Assignee: Henri Biestro
• Reporter: Henri Biestro
• Created: 12/Oct/16 09:05
• Updated: 29/Jun/21 06:59
• Resolved: 12/Oct/16 09:12

Description

Originally a question from Wayne Robinson:
http://apache-commons.680414.n4.nabble.com/jexl-Blacklist-by-default-in-sandbox-td4690316.html

There is no way today to make a sandbox a blackbox by default; adding a flag to determine whether the sandbox should consider that no explicit list (white or black) on a given class means blacklisting or whitelisting it. Making it explicit solves the issue.