Author: tolusha Date: 2010-11-09 08:55:08 -0500 (Tue, 09 Nov 2010) New Revision: 3412 Modified: core/trunk/exo.core.component.script.groovy/src/main/java/org/exoplatform/services/script/groovy/GroovyScriptInstantiator.java Log: EXOJCR-986: Enable SecurityManager by default Modified: core/trunk/exo.core.component.script.groovy/src/main/java/org/exoplatform/services/script/groovy/GroovyScriptInstantiator.java =================================================================== --- core/trunk/exo.core.component.script.groovy/src/main/java/org/exoplatform/services/script/groovy/GroovyScriptInstantiator.java 2010-11-09 13:54:32 UTC (rev 3411) +++ core/trunk/exo.core.component.script.groovy/src/main/java/org/exoplatform/services/script/groovy/GroovyScriptInstantiator.java 2010-11-09 13:55:08 UTC (rev 3412) @@ -235,14 +235,22 @@ * @param loader * @return */ - public Object instantiateScript(GroovyCodeSource codeSource, GroovyClassLoader loader) + public Object instantiateScript(final GroovyCodeSource codeSource, GroovyClassLoader loader) { if (loader == null) { loader = new GroovyClassLoader(); } - Class<?> clazz = null; - clazz = loader.parseClass(codeSource); + + final GroovyClassLoader fLoader = loader; + Class<?> clazz = SecurityHelper.doPriviledgedAction(new PrivilegedAction<Class<?>>() + { + public Class<?> run() + { + return fLoader.parseClass(codeSource); + } + }); + try { return createObject(clazz);