test/script/basic/JDK-8158467.js

/*
 * Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved.
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
 *
 * This code is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 only, as
 * published by the Free Software Foundation.
 *
 * This code is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 * version 2 for more details (a copy is included in the LICENSE file that
 * accompanied this code).
 *
 * You should have received a copy of the GNU General Public License version
 * 2 along with this work; if not, write to the Free Software Foundation,
 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 *
 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 * or visit www.oracle.com if you need additional information or have any
 * questions.
 */

/**
 * JDK-8158467: AccessControlException is thrown on public Java class access if "script app loader" is set to null
 *
 * @option -scripting
 * @test
 * @run
 */

var Factory = Java.type("jdk.nashorn.api.scripting.NashornScriptEngineFactory");
var fac = new Factory();

// This script has to be given RuntimePermission("nashorn.setConfig")
var e = fac["getScriptEngine(java.lang.ClassLoader)"](null);

print(e.eval("java.lang.System"));
print(e.eval("({ foo: 42})").foo);
print((e.eval("function(x) x*x"))(31));

e.put("output", print);
var runnable = e.eval(<<EOF
    new java.lang.Runnable() {
        run: function() {
            output("hello Runnable");
        }
    }
EOF);

runnable.run();

var obj = e.eval(<<EOF
new (Java.extend(Java.type("java.lang.Object"))) {
    hashCode: function() 33,
    toString: function() "I'm object"
}
EOF);

print(obj.hashCode());
print(obj.toString());

// should throw SecurityException!
try {
    e.eval("Packages.jdk.internal");
} catch (ex) {
    print(ex);
}

// should throw SecurityException!
try {
    e.eval("Java.type('jdk.internal.misc.Unsafe')");
} catch (ex) {
    print(ex);
}

// should throw SecurityException!
try {
    e.eval("Java.type('jdk.nashorn.internal.Context')");
} catch (ex) {
    print(ex);
}

// should throw ClassNotFoundException as null is script
// "app loader" [and not platform loader which loads nashorn]
e.eval(<<EOF
try {
    Java.type('jdk.nashorn.api.scripting.JSObject');
} catch (ex) {
    output(ex);
}
EOF);