Skip to content

Latest commit

 

History

History
63 lines (48 loc) · 3.03 KB

README.md

File metadata and controls

63 lines (48 loc) · 3.03 KB

March 13, 2018

  • Update 2.1.9
    • Drop of all remote code execution capabilities
    • Restricting (de)serialization for security reasons (the serialization feature may be dropped in one of the next releases) #109
    • Ability to run with Java-9 and Java-10 with restricted module access (jvm flag --illegal-access=deny).
    • Fixed a deadlock when pasting code into the graphical console
    • SHA512

Feb. 20, 2014

  • Update 2.1.8
    • fixes #97, #98, and #99 - all variants of a regression introduced with #88

Nov. 6, 2013

  • Update 2.1.7
    • Another hotfix when running beanshell in a security restricted environment
    • Fix for finally block not executed when an exception is thrown in catch block - thanks to Lorenzo Cameroni for pointing this out and suggesting a fix

Sep. 27, 2013

  • Update v2.1.6
    • This release mainly fixes issues of running beanshell in a security restricted environment. This may break existing scriptes which define classes with protected methods, constructors or fields or which access inherited protected methods, constructors or fields. If your (script) code doesn't explicitly switch on the accessibility mode your script code will break with this update. To receive the old behaviour either call bsh.Capabilities.setAccessibility(true) in your java code or setAccessibility(true) in your script code. This change was done to allow the usage of beanshell2 in security restricted environments. See issue #88 for code changes.
    • New version number scheme (drop of b for build).

Nov. 21, 2011

  • Update v2.1b5, fixing
    • Do-while loop does not check condition on "continue" - issue #57
    • Fixes when using JSR-223 an exception which is thrown for clause that shouldn't be evaluated - issue #60.

Older downloads are still available at code.google.com

Other notable changes not mentioned above in contrast to the latest version available at beanshell.org are:

  • The support for parsing of java files through the class loader has been dropped. It was considered more harmful than helpful.
  • The support of Java-5 varargs.
  • Support for long string literals:
    xml = """<books>
       <book>
          <title>Beanshell2</title>
       </book>
    </books>""""
    
  • Build-in jsr-233 support (Scripting for the Java Platform).