Service Task Class Whitelisting

cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Active Member

Service Task Class Whitelisting

Hi,

I was trying to whitelist the JavaScript classes to get more control over execution of JavaScript classes in the Script task but after enabling some required services to 'true' in properties file, I got following error:

Access to Java class "org.activiti.engine.impl.persistence.entity.ExecutionEntity" is prohibited. 

Following are the steps I executed to enabled servies:

  1.  Added the script types in activiti-app/WEB-INF/classes/activiti/whitelisted-scripts.conf:
    • javascript
    • js
    • ecmascript
    • groovy
    • juel
  2. Enabled javascript.secure-scripting.enabled=true
  3. Set javascript.secure-scripting.enable-class-whitelisting=true
  4. Added following to activiti-app/WEB-INF/classes/activiti/javascript-whitelist-classes.conf:
    • java.lang.System
    • java.util.ArrayList
    • org.apache.tomcat.util.log.SystemLogHandler

Is there anything that I missed here? 

Thanks for help.

2 Replies
Highlighted
Moderator
Moderator

Re: Service Task Class Whitelisting

Active Member

Re: Service Task Class Whitelisting

Hi @openpj

Thanks for reply.

I have not made changes to the following properties files/classes:

Is it required to do so? I believe Whitelisting JavaScript is alternative to Bean Whitelisting.