Description
Make it so that gremlin-groovy is an opt-in bit of functionality for Gremlin Server and by default instead rely on traversals generated from gremlin-language as implemented in TINKERPOP-2582. In this way, we have a secure Gremlin Server by default.
One of the problems with disabling gremlin-groovy processing is that we require it for the init script to the server. Without that, we have no mechanism that allows configuration of "g" and other important bits. It could be that we need to retain gremlin-groovy for that purpose and just prevent it from being called externally. Not sure that's so good though because removing Groovy more wholly would be nice given TINKERPOP-2526
Attachments
Issue Links
- depends upon
-
TINKERPOP-2582 Construct traversals from gremlin-language
- Closed