topic Service Task Class Whitelisting in Alfresco Forum

Service Task Class Whitelisting

alfresco1576 — Wed, 27 May 2020 16:34:52 GMT

Hi,

I was trying to whitelist the JavaScript classes to get more control over execution of JavaScript classes in the Script task but after enabling some required services to 'true' in properties file, I got following error:

Access to Java class "org.activiti.engine.impl.persistence.entity.ExecutionEntity" is prohibited.

Following are the steps I executed to enabled servies:

Added the script types in activiti-app/WEB-INF/classes/activiti/whitelisted-scripts.conf:
- javascript
- js
- ecmascript
- groovy
- juel
Enabled javascript.secure-scripting.enabled=true
Set javascript.secure-scripting.enable-class-whitelisting=true
Added following to activiti-app/WEB-INF/classes/activiti/javascript-whitelist-classes.conf:
- java.lang.System
- java.util.ArrayList
- org.apache.tomcat.util.log.SystemLogHandler

Is there anything that I missed here?

Thanks for help.

Re: Service Task Class Whitelisting

openpj — Thu, 28 May 2020 10:25:22 GMT

Check other settings from the APS SDK here:

https://github.com/OpenPj/alfresco-process-services-project-sdk/tree/master/aps-extensions-jar/src/test/resources/activiti

Hope this helps

Re: Service Task Class Whitelisting

alfresco1576 — Thu, 28 May 2020 14:48:46 GMT

Hi @openpj,

Thanks for reply.

I have not made changes to the following properties files/classes:

Is it required to do so? I believe Whitelisting JavaScript is alternative to Bean Whitelisting.