Secure Scripting for Groovy

[mattydebie]

Hi everyone!

Today I was looking for a way to secure script tasks. I noticed in the docs that this is possible by using Mozilla’s Rhino which seems to be only javascript.

My question is if there is also a way to secure Groovy scripts? I could not seem to find any…
Some ways could be to run flowable in chroot (this way no rm -rf / could harm the host) but than you could still mess up the flowable installation…

Any and every thought is welcome

Sincerely
Matthias

[Robinyo]

@mattydebie

My question is if there is also a way to secure Groovy scripts?

See:

• Groovy scripts and JVM Security
• Improved sandboxing of Groovy scripts
• Sandboxing plugins in Java
• How Activiti Secure Scripting works

Also see:

• GraalVM and Groovy

[rajitjuyal]

Hi All,
I am also looking for a way to secure groovy scripts.
Is flowable is providing functionality to secure the groovy script, similar to the flowable secure javascript module provided for javascript?

Best Regards,
Rajit