Hello, everyone,
Greetings!

 

 I want to use Drools6.0 in my project,but I found a security issue. The Drools6.0 automatically import the java.lang.* packages.

As we all know, thess packages including some package such as Process class,which can damage the application's  security.

So, I want know how to prohibit some package  from executing in rule configure file(including drl,decistion tablea)  or program code.

 

                                                                                                                    Sincerely yours,     philip