Rhino: restrict Java packages that can be accessed from JavaScript.

Question

When embedding a JavaScript interpreter (Rhino) in a Java application (to be able to script this application), how can you limit yourself to restricting the Java packages available to scripts? For example, only "java.lang. *" Should be available.

Answer 1

The method of blocking access to certain packages and classes (including through reflection) in Rhino is described here . An important interface is ClassShutter , which provides access control to support Rhino LiveConnect.

Answer 2

what about just saying:

java = undefined; com = undefined; Packages = undefined;

in the initial script that is loaded first.