Rhino：限制可以从JavaScript访问的Java包 [英] Rhino: restrict Java packages that can be accessed from JavaScript

问题描述

将JavaScript解释器（Rhino）嵌入到Java应用程序中（为了能够编写该应用程序的脚本），如何限制脚本可用的Java包？例如，只能访问java.lang。*。

When embedding a JavaScript interpreter (Rhino) into a Java application (to be able to script that application), how would one go about restricting the Java packages that are available to scripts? For example, only "java.lang.*" should be accessible.

推荐答案

阻止访问某些包和类的方法在Rhino中描述（包括通过反思）此处 。重要的界面是 ClassShutter ，它为Rhino提供访问控制。 LiveConnect支持。

A method for blocking access to certain packages and classes (including through reflection) in Rhino is described here. The important interface is ClassShutter which provides access control for Rhino's LiveConnect support.

这篇关于Rhino：限制可以从JavaScript访问的Java包的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！