feat(sandbox): sandbox Groovy shell
Closes gravitee-io/issues#3933
@@ -278,3 +278,26 @@ ds:
# - method java.time.format.DateTimeFormatter ofLocalizedDate java.time.format.FormatStyle
# Ex: allow access to all methods of DateTimeFormatter class
# - class java.time.format.DateTimeFormatter
+
+#groovy:
+ # Allows to define which methods, fields, constructors, annotations or classes are accessible to the Groovy Script (/!\ caution, changing default whitelist may expose you to security issues).
+ # A complete list of default whitelist methods can be found here (https://raw.githubusercontent.com/gravitee-io/gravitee-policy-groovy/master/src/main/resources/groovy-whitelist).
+# whitelist:
+ # Allows to define if the specified list of methods, fields, constructors or classes should be append to the default one or should replace it.
+ # We recommend you to always choose 'append' unless you absolutely know what you are doing.
+# mode: append
+ # Define the list of classes, methods, constructors, fields or annotations to append (or set) to made accessible to the Groovy Script.
+ # start with 'method' to allow a specific method (complete signature).
+ # start with 'class' to allow a complete class. All methods, constructors and fields of the class will then be accessible.
+ # start with 'new' to allow a specific constructor (complete signature).
+ # start with 'field' to allow access to a specific field of a class.
+ # start with 'annotation' to allow use of a specific annotation.
+# list:
+ # Ex: allow access to DateTimeFormatter.ofLocalizedDate(FormatStyle) method
+ # - method java.time.format.DateTimeFormatter ofLocalizedDate java.time.format.FormatStyle
+ # Ex: allow access to all methods, constructors and fields of DateTimeFormatter class
+ # - class java.time.format.DateTimeFormatter
+ # Ex: allow usage of field Integer.MAX_VALUE
+ # - field java.lang.Integer MAX_VALUE
+ # Ex: allow usage of @Override annotation
+ # - annotation java.lang.Override
\ No newline at end of file
