[SLING-166] JavaScript: Enable request processing limitation

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: Scripting JavaScript 2.0.2
• Component/s: Scripting
• Assignee: Unassigned
• Reporter: Felix Meschberger
• Created: 16/Jan/08 10:23
• Updated: 12/Apr/23 07:15
• Resolved: 12/Apr/23 07:15

Description

The Rhino ContextFactory enables functionality to limit the time a given script may run. This might be particularly usefull for the web application case to prevent hogging the server with "never ending" scripts.

The drawback of this functionality is, that the scripts must be interpreted, because the limits are enforced by the interpreter. But given that scripts are generally small and simple (and more complex business logic is done in Java classes), this may not be a big issue.

Issue Links

• is duplicated by: SLING-524 Restrict JavaScript Engine to allow running untrusted scripts for user-driven templating