Skip to content

(fix): check innerClazz while get property#571

Merged
killme2008 merged 1 commit intokillme2008:masterfrom
kslex:master
Oct 3, 2023
Merged

(fix): check innerClazz while get property#571
killme2008 merged 1 commit intokillme2008:masterfrom
kslex:master

Conversation

@kslex
Copy link
Contributor

@kslex kslex commented Sep 18, 2023

这个pr目的是防范对未在白名单内的类进行不恰当的调用。
如果不将AviatorEvaluatorInstance和Env类加入白名单,利用__instance__和__env__从而对这两者的属性、方法调用也是失败

@killme2008
Copy link
Owner

Good catch!

@killme2008 killme2008 merged commit d4415b3 into killme2008:master Oct 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants