[VELOCITY-516] SecureUberspector doesn't work with #foreach (iterators)

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.5 beta2
• Fix Version/s: 1.5
• Component/s: Engine
• Assignee: Henning Schmiedehausen
• Reporter: Vincent Massol
• Created: 15/Feb/07 09:54
• Updated: 08/Mar/07 00:04
• Resolved: 06/Mar/07 11:19

Description

When using a #foreach iterating over strings I get: "Cannot retrieve iterator from object of class [Ljava.lang.String; due to security restrictions."

The reason is that in the SecureUberspector class there's a call to checkObjectExecutePermission() with the second parameter being null. And in checkObjectExecutePermission() there's:

        if (methodName == null)
        {
            return false;
        }