fix: add missing dateutil extension

gravitee-io · Aug 21, 2024 · f6ab32d · f6ab32d
1 parent c1f7456
commit f6ab32d
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -120,6 +120,12 @@
             <version>${groovy.version}</version>
         </dependency>
 
+        <dependency>
+            <groupId>org.codehaus.groovy</groupId>
+            <artifactId>groovy-dateutil</artifactId>
+            <version>${groovy.version}</version>
+        </dependency>
+
         <dependency>
             <groupId>org.kohsuke</groupId>
             <artifactId>groovy-sandbox</artifactId>

diff --git a/src/main/java/io/gravitee/policy/groovy/sandbox/SecuredResolver.java b/src/main/java/io/gravitee/policy/groovy/sandbox/SecuredResolver.java
@@ -35,6 +35,8 @@
 import org.apache.commons.lang3.reflect.ConstructorUtils;
 import org.apache.commons.lang3.reflect.FieldUtils;
 import org.apache.commons.lang3.reflect.MethodUtils;
+import org.apache.groovy.dateutil.extensions.DateUtilExtensions;
+import org.apache.groovy.dateutil.extensions.DateUtilStaticExtensions;
 import org.codehaus.groovy.runtime.DateGroovyMethods;
 import org.codehaus.groovy.runtime.DefaultGroovyMethods;
 import org.codehaus.groovy.runtime.EncodingGroovyMethods;
@@ -90,6 +92,8 @@ public class SecuredResolver {
         StringGroovyMethods.class,
         EncodingGroovyMethods.class,
         DateGroovyMethods.class,
+        DateUtilExtensions.class,
+        DateUtilStaticExtensions.class,
     };
 
     private static final List<String> ALLOWED_ARRAY_NATIVE_METHODS = Arrays.asList("getAt", "putAt", "getLength");

diff --git a/src/main/resources/groovy-whitelist b/src/main/resources/groovy-whitelist
@@ -68,6 +68,9 @@ class java.util.List
 class java.util.Map
 class java.util.Queue
 class java.util.Random
+class org.codehaus.groovy.runtime.DateGroovyMethods
+class org.apache.groovy.dateutil.extensions.DateUtilExtensions
+class org.apache.groovy.dateutil.extensions.DateUtilStaticExtensions
 
 # Allows method signatures
 method groovy.json.JsonSlurper parseText java.lang.String
@@ -1174,6 +1177,7 @@ method org.codehaus.groovy.runtime.StringGroovyMethods tr java.lang.CharSequence
 method org.codehaus.groovy.runtime.StringGroovyMethods unexpand java.lang.CharSequence
 method org.codehaus.groovy.runtime.StringGroovyMethods unexpand java.lang.CharSequence int
 method org.codehaus.groovy.runtime.StringGroovyMethods unexpandLine java.lang.CharSequence int
+
 # Allows constructor signatures
 
 # Allows annotations