diff options
author | Anton Tananaev <anton@traccar.org> | 2023-04-16 12:54:38 -0700 |
---|---|---|
committer | Anton Tananaev <anton@traccar.org> | 2023-04-16 12:54:38 -0700 |
commit | 94280e2e63b02ae67482c85a388a58add85e10cf (patch) | |
tree | e64bfab39ac0aa858ac38fc8ffcc31ec3a83dc28 /src/main/java/org/traccar | |
parent | 514605fc0070c7365e525141b6bdd64f5dffadc7 (diff) | |
download | trackermap-server-94280e2e63b02ae67482c85a388a58add85e10cf.tar.gz trackermap-server-94280e2e63b02ae67482c85a388a58add85e10cf.tar.bz2 trackermap-server-94280e2e63b02ae67482c85a388a58add85e10cf.zip |
Fix JXLS JEXL permissions
Diffstat (limited to 'src/main/java/org/traccar')
-rw-r--r-- | src/main/java/org/traccar/reports/common/ExpressionEvaluatorFactory.java | 58 |
1 files changed, 58 insertions, 0 deletions
diff --git a/src/main/java/org/traccar/reports/common/ExpressionEvaluatorFactory.java b/src/main/java/org/traccar/reports/common/ExpressionEvaluatorFactory.java new file mode 100644 index 000000000..8b139a572 --- /dev/null +++ b/src/main/java/org/traccar/reports/common/ExpressionEvaluatorFactory.java @@ -0,0 +1,58 @@ +package org.traccar.reports.common; + +import org.apache.commons.jexl3.JexlBuilder; +import org.apache.commons.jexl3.introspection.JexlPermissions; +import org.jxls.expression.ExpressionEvaluator; +import org.jxls.expression.JexlExpressionEvaluator; + +import java.lang.reflect.Constructor; +import java.lang.reflect.Field; +import java.lang.reflect.Method; + +public class ExpressionEvaluatorFactory implements org.jxls.expression.ExpressionEvaluatorFactory { + + private final JexlPermissions permissions = new JexlPermissions() { + @Override + public boolean allow(Package pack) { + return true; + } + + @Override + public boolean allow(Class<?> clazz) { + return true; + } + + @Override + public boolean allow(Constructor<?> ctor) { + return true; + } + + @Override + public boolean allow(Method method) { + return true; + } + + @Override + public boolean allow(Field field) { + return true; + } + + @Override + public JexlPermissions compose(String... src) { + return this; + } + }; + + @Override + public ExpressionEvaluator createExpressionEvaluator(String expression) { + JexlExpressionEvaluator expressionEvaluator = expression == null + ? new JexlExpressionEvaluator() + : new JexlExpressionEvaluator(expression); + expressionEvaluator.setJexlEngine(new JexlBuilder() + .silent(true) + .strict(false) + .permissions(permissions) + .create()); + return expressionEvaluator; + } +} |