禁止从Nashorn导入Java

Question

Is it possible to ban some packages of java imports from Nashorn?

This question answered to prevent all Java API calls. But I'd like to create a java imports white list to minimize implem risks (not all java APIs)

I've seen this nashorn.args "--specialize-calls" but don't know how to use it.

Thanks for the support!

Answer 1

Yes! and Links:

• https://twitter.com/sundararajan_a/status/562086779004530688

• Secure Nashorn JS Execution

Thanks a lot for your comments

Only one problem about http://openjdk.java.net/jeps/202

-> jdk8u40 not released yet by Oracle