Configuration for the Rhino Javascript engine

Enable Java Class Allowlist (rhino.java.class.shutter.allowlistEnabled)

Set allowed java class instantiation. When unrestricted any Java class loaded in the current process can be instantiated from Javascript. To restrict to only specified packages and/or classes set this property to true. Changing this value requires a restart.

Default: false

Allowlisted Java Classes and Packages (rhino.java.class.shutter.allowlist)

List of java packages and/or classes that can be instantiated from Javascript in one delimited string. The format is full package names or full class names separated by a ';'. Changing this value requires a restart.

Default: java.io;java.lang;java.math;java.text;

Enable Java Class Denylist (rhino.java.class.shutter.denylistEnabled)

Restrict java class instantiation. When unrestricted any Java class loaded in the current process can be instantiated from Javascript. To prohibit loading of specific packages and/or classes set this property to true. Changing this value requires a restart.

Default: true

Denylisted Java Classes and Packages (rhino.java.class.shutter.denylist)

List of java packages and/or classes that cannot be instantiated from Javascript in one delimited string. The format is full package names or full class names separated by a ';'. Changing this value requires a restart.

Default: java.io.File;java.io.FileInputStream;java.io.FileOutputStream;