delight.graaljssandbox.internal

Class GraalSandboxImpl

java.lang.Object

delight.nashornsandbox.internal.NashornSandboxImpl

delight.graaljssandbox.internal.GraalSandboxImpl

All Implemented Interfaces:

GraalSandbox, delight.nashornsandbox.NashornSandbox

public class GraalSandboxImpl
extends delight.nashornsandbox.internal.NashornSandboxImpl
implements GraalSandbox

Nashorn sandbox implementation for GraalJS Due to the active development nature of GraalJS many of these provisions may be temporary.

Author:

marcoellwanger

Field Summary

Fields

Modifier and Type	Field and Description
boolean	isStrict

Fields inherited from class delight.nashornsandbox.internal.NashornSandboxImpl

allowExitFunctions, allowGlobalsObjects, allowLoadFunctions, allowNoBraces, allowPrintFunctions, allowReadFunctions, cached, engineAsserted, evaluator, executor, lazyInvocable, maxCPUTime, maxMemory, maxPreparedStatements, sandboxClassFilter, sanitizer, scriptEngine, suppliedCache

Constructor Summary

Constructors

Constructor and Description
GraalSandboxImpl()
GraalSandboxImpl(String... params)

Method Summary

Modifier and Type	Method and Description
Bindings	createBindings() Temporary: GraalJS currently does not support sharing objects across bindings/contexts
Bindings	createNewBindings()
Object	eval(String js, ScriptContext scriptContext, Bindings bindings) If a script context is provided, its bindings will be evaluated inside the script engine itself and merged into the engine bindings.
protected void	produceSecureBindings()
protected void	resetEngineBindings() Temporary: GraalJS currently does not support resetting of bindings
protected Bindings	secureBindings(Bindings bindings) Temporary: GraalJS currently does not support sharing objects across bindings/contexts and has slightly different behavior for engine vs global context

Methods inherited from class delight.nashornsandbox.internal.NashornSandboxImpl

allow, allowExitFunctions, allowGlobalsObjects, allowLoadFunctions, allowNoBraces, allowPrintFunctions, allowReadFunctions, disallow, disallowAllClasses, eval, eval, eval, executeSandboxedOperation, get, getExecutor, getSandboxedInvocable, getSanitizer, inject, isAllowed, sanitizeBindings, setExecutor, setMaxCPUTime, setMaxMemory, setMaxPreparedStatements, setScriptCache, setWriter

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface delight.nashornsandbox.NashornSandbox

allow, allowExitFunctions, allowGlobalsObjects, allowLoadFunctions, allowNoBraces, allowPrintFunctions, allowReadFunctions, disallow, disallowAllClasses, eval, eval, eval, get, getExecutor, getSandboxedInvocable, inject, isAllowed, setExecutor, setMaxCPUTime, setMaxMemory, setMaxPreparedStatements, setScriptCache, setWriter

Field Detail

isStrict

public final boolean isStrict

Constructor Detail

GraalSandboxImpl

public GraalSandboxImpl()

GraalSandboxImpl

public GraalSandboxImpl(String... params)

Method Detail

resetEngineBindings

protected void resetEngineBindings()

Temporary: GraalJS currently does not support resetting of bindings

Overrides:

resetEngineBindings in class delight.nashornsandbox.internal.NashornSandboxImpl

See Also:

https://github.com/oracle/graal/issues/631, https://github.com/graalvm/graaljs/issues/47, https://github.com/graalvm/graaljs/issues/146

createBindings

public Bindings createBindings()

Temporary: GraalJS currently does not support sharing objects across bindings/contexts

Specified by:

createBindings in interface delight.nashornsandbox.NashornSandbox

Overrides:

createBindings in class delight.nashornsandbox.internal.NashornSandboxImpl

See Also:

https://github.com/oracle/graal/issues/631

createNewBindings

public Bindings createNewBindings()

Specified by:

createNewBindings in interface GraalSandbox

produceSecureBindings

protected void produceSecureBindings()

secureBindings

protected Bindings secureBindings(Bindings bindings)

Temporary: GraalJS currently does not support sharing objects across bindings/contexts and has slightly different behavior for engine vs global context

Overrides:

secureBindings in class delight.nashornsandbox.internal.NashornSandboxImpl

See Also:

https://github.com/oracle/graal/issues/631, https://github.com/graalvm/graaljs/issues/47, Merges new bindings into existing engine bindings while preserving existing globals

eval

public Object eval(String js,
                   ScriptContext scriptContext,
                   Bindings bindings)
            throws delight.nashornsandbox.exceptions.ScriptCPUAbuseException,
                   ScriptException

If a script context is provided, its bindings will be evaluated inside the script engine itself and merged into the engine bindings. Nashorn checks against globals but Graal seems to override global entries if the same key is present in the script context's bindings. For strict mode for GraalJS we need to prefix the sanitized code with 'use strict;'

Specified by:

eval in interface delight.nashornsandbox.NashornSandbox

Overrides:

eval in class delight.nashornsandbox.internal.NashornSandboxImpl

Throws:

delight.nashornsandbox.exceptions.ScriptCPUAbuseException

ScriptException