March 13, 2018
- Update 2.1.9
- Drop of all remote code execution capabilities
- Restricting (de)serialization for security reasons (the serialization feature may be dropped in one of the next releases) #109
- Ability to run with Java-9 and Java-10 with restricted module access (jvm flag --illegal-access=deny).
- Fixed a deadlock when pasting code into the graphical console
- SHA512
Feb. 20, 2014
Nov. 6, 2013
- Update 2.1.7
- Another hotfix when running beanshell in a security restricted environment
- Fix for finally block not executed when an exception is thrown in catch block - thanks to Lorenzo Cameroni for pointing this out and suggesting a fix
Sep. 27, 2013
- Update v2.1.6
- This release mainly fixes issues of running beanshell in a security restricted environment. This may break existing
scriptes which define classes with protected methods, constructors or fields or which access inherited protected
methods, constructors or fields. If your (script) code doesn't explicitly switch on the accessibility mode your
script code will break with this update.
To receive the old behaviour either call
bsh.Capabilities.setAccessibility(true)
in your java code orsetAccessibility(true)
in your script code. This change was done to allow the usage of beanshell2 in security restricted environments. See issue #88 for code changes. - New version number scheme (drop of b for build).
- This release mainly fixes issues of running beanshell in a security restricted environment. This may break existing
scriptes which define classes with protected methods, constructors or fields or which access inherited protected
methods, constructors or fields. If your (script) code doesn't explicitly switch on the accessibility mode your
script code will break with this update.
To receive the old behaviour either call
Nov. 21, 2011
- Update v2.1b5, fixing
Older downloads are still available at code.google.com
Other notable changes not mentioned above in contrast to the latest version available at beanshell.org are:
- The support for parsing of java files through the class loader has been dropped. It was considered more harmful than helpful.
- The support of Java-5 varargs.
- Support for long string literals:
xml = """<books> <book> <title>Beanshell2</title> </book> </books>""""
- Build-in jsr-233 support (Scripting for the Java Platform).