Service Task Class Whitelisting

Showing results for 
Search instead for 
Did you mean: 
Active Member

Service Task Class Whitelisting


I was trying to whitelist the JavaScript classes to get more control over execution of JavaScript classes in the Script task but after enabling some required services to 'true' in properties file, I got following error:

Access to Java class "org.activiti.engine.impl.persistence.entity.ExecutionEntity" is prohibited. 

Following are the steps I executed to enabled servies:

  1.  Added the script types in activiti-app/WEB-INF/classes/activiti/whitelisted-scripts.conf:
    • javascript
    • js
    • ecmascript
    • groovy
    • juel
  2. Enabled
  3. Set
  4. Added following to activiti-app/WEB-INF/classes/activiti/javascript-whitelist-classes.conf:
    • java.lang.System
    • java.util.ArrayList
    • org.apache.tomcat.util.log.SystemLogHandler

Is there anything that I missed here? 

Thanks for help.

2 Replies

Re: Service Task Class Whitelisting

Active Member

Re: Service Task Class Whitelisting

Hi @openpj

Thanks for reply.

I have not made changes to the following properties files/classes:

Is it required to do so? I believe Whitelisting JavaScript is alternative to Bean Whitelisting.