Changes between Version 1 and Version 2 of SCRIPTING_ACTIONS_API_R0

Timestamp:

07/13/09 20:14:38 (16 years ago)

Author:

mitex

Comment:

--

SCRIPTING_ACTIONS_API_R0

@@ -6 +6 @@
 
 == Overview ==
-The goal of this task is to expose to the user the Sophie book's model and Sophie's logic in a user-friendly way.
+The goal of this task is to expose the Sophie book's model and Sophie's logic in a user-friendly way to the user.
 
 Generally, there are two use-cases for scripting, which imply some differences in the requirements:
@@ -18 +18 @@
 ^(List the necessary requirements that the task must fulfill.)^
 
+ * Security
+  * Some scripts can crash the application.
+  * Some other scripts can allow crackers to execute malicious code.
+  * Solution: Not all Java classes have to be exposed to Sophie scripts.
+
 == Task result ==
  * Source code
 
 == Implementation idea ==
-^(Provide some rough implementation idea(s).)^
+
+ * To filter the access to some Java classes:
+{{{
+context.setClassShutter(new ClassShutter() {
+        @Override
+        public boolean visibleToScripts(String fullClassName) {
+                return fullClassName.startsWith("org.mozilla.javascript");
+        }
+});
+}}}
+
+ * The following lines add a global variable {{{out}}} that is a JavaScript reflection of the {{{System.out}}} variable:
+{{{
+Object wrappedOut = Context.javaToJS(System.out, scope);
+ScriptableObject.putProperty(scope, "out", wrappedOut);
+}}}
 
 == Related ==