topic Re: Sandboxing script task in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/sandboxing-script-task/m-p/174522#M127652 <HTML><HEAD></HEAD><BODY><SPAN>You'll need to see what's possible in the JSR-223 spec for sandboxing. Activiti leverages that spec to execute scripts. Take a look at the org.activiti.engine.impl.scripting.ScriptingEngines class. You can create a subclass of this and plug it in using the processEngineConfiguration. This subclass can do additional set-up of the script-bindings or any funny stuff you want to do. If this is not sufficient, you can rip out all functionality and return a customised (sandboxed) version of ScriptEngine and Bindings.</SPAN></BODY></HTML> Mon, 10 Mar 2014 09:53:22 GMT frederikherema1 2014-03-10T09:53:22Z Sandboxing script task https://connect.hyland.com/t5/alfresco-archive/sandboxing-script-task/m-p/174521#M127651 Spring app with Activiti engine embedded runs server-side. I need to secure (sandbox) user-defined scripts deployed on demand. The only Activiti-related doc I found describes how to limit ScriptTask's Spring beans visibility (=white list) but this is obviously not enough - e.g. a malicious user can Thu, 06 Mar 2014 11:35:28 GMT https://connect.hyland.com/t5/alfresco-archive/sandboxing-script-task/m-p/174521#M127651 robi_m 2014-03-06T11:35:28Z Re: Sandboxing script task https://connect.hyland.com/t5/alfresco-archive/sandboxing-script-task/m-p/174522#M127652 <HTML><HEAD></HEAD><BODY><SPAN>You'll need to see what's possible in the JSR-223 spec for sandboxing. Activiti leverages that spec to execute scripts. Take a look at the org.activiti.engine.impl.scripting.ScriptingEngines class. You can create a subclass of this and plug it in using the processEngineConfiguration. This subclass can do additional set-up of the script-bindings or any funny stuff you want to do. If this is not sufficient, you can rip out all functionality and return a customised (sandboxed) version of ScriptEngine and Bindings.</SPAN></BODY></HTML> Mon, 10 Mar 2014 09:53:22 GMT https://connect.hyland.com/t5/alfresco-archive/sandboxing-script-task/m-p/174522#M127652 frederikherema1 2014-03-10T09:53:22Z