236193 - Only active Context for compilation

Status: RESOLVED FIXED

(Rhino Graveyard :: Compiler, defect)

Description

[Igor Bukanov]

To prevent a security breach when untrusted script calls Interpreter.compile
with null for Context argument to construct Script instances without any
associated security domain I suggest to change Interpreter and optimizer/Codegen
to use only currently entered Context as a source of SecurityController. 

In addition, the interpreter to drop privileges should use SecurityController
that was used during compilation, not the current one in Context, to prevent
executing of compiled scripts with different SecurityController implementation
or even without it.

Comment 1

[Igor Bukanov]

Attachment: Implementation

Comment 2

[Igor Bukanov]

I committed the attchment 142750

Comment 3

[Igor Bukanov]

Adding proper target milestone