renun/legado
1
0
Fork 0
mirror of https://github.com/gedoor/legado.git synced 2025-08-10 00:52:30 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

优化
Some checks are pending
Test Build / prepare (push) Waiting to run
Details
Test Build / build (app, release) (push) Blocked by required conditions
Details
Test Build / build (app, releaseA) (push) Blocked by required conditions
Details
Test Build / prerelease (push) Blocked by required conditions
Details
Test Build / lanzou (push) Blocked by required conditions
Details
Test Build / test_Branch (push) Blocked by required conditions
Details
Test Build / telegram (push) Blocked by required conditions
Details

Browse Source
This commit is contained in:
Horis
2025-04-02 22:09:57 +08:00
parent 0e6a00fbaf
commit 3995d1e9ad
2 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/rhino/src/main/java/com/script/rhino/ProtectedNativeJavaClass.kt
View File

@@ -6,7 +6,7 @@ import org.mozilla.javascript.Scriptable
class ProtectedNativeJavaClass( class ProtectedNativeJavaClass(
scope: Scriptable, scope: Scriptable,
javaClass: Class<*>, javaClass: Class<*>,
private val protectedName: HashSet<String> private val protectedName: Set<String>
) : NativeJavaClass(scope, javaClass) { ) : NativeJavaClass(scope, javaClass) {
override fun has( override fun has(

10
modules/rhino/src/main/java/com/script/rhino/RhinoClassShutter.kt
View File

@@ -34,6 +34,7 @@ import java.io.ObjectOutputStream
import java.lang.reflect.Member import java.lang.reflect.Member
import java.nio.file.FileSystem import java.nio.file.FileSystem
import java.nio.file.Path import java.nio.file.Path
import java.util.Collections
/** /**
* This class prevents script access to certain sensitive classes. * This class prevents script access to certain sensitive classes.
@@ -94,14 +95,19 @@ object RhinoClassShutter : ClassShutter {
"androidx.sqlite.db", "androidx.sqlite.db",
"androidx.room", "androidx.room",
"cn.hutool.core.io", "cn.hutool.core.io",
"cn.hutool.core.lang.reflect",
"dalvik.system", "dalvik.system",
"java.nio.file", "java.nio.file",
"java.lang.reflect",
"java.lang.invoke",
"io.legado.app.data.dao", "io.legado.app.data.dao",
) "com.script",
"org.mozilla",
).let { Collections.unmodifiableSet(it) }
} }
private val systemClassProtectedName by lazy { private val systemClassProtectedName by lazy {
hashSetOf("load", "loadLibrary", "exit") Collections.unmodifiableSet(hashSetOf("load", "loadLibrary", "exit"))
} }
fun visibleToScripts(obj: Any): Boolean { fun visibleToScripts(obj: Any): Boolean {