fix: disable OQL method call for security

eclipse-jifa · Jan 19, 2024 · e55a010 · e55a010
1 parent 0b9c335
commit e55a010
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/playground.Dockerfile b/playground.Dockerfile
@@ -14,4 +14,4 @@ COPY --from=build ${DEPENDENCY}/BOOT-INF/classes /jifa
 ADD https://raw.githubusercontent.com/wiki/eclipse/jifa/resources/playground/thread-dump-demo.log /demo/
 ADD https://raw.githubusercontent.com/wiki/eclipse/jifa/resources/playground/gc-log-demo.log /demo/
 ADD https://raw.githubusercontent.com/wiki/eclipse/jifa/resources/playground/heap-dump-demo.hprof.gz /demo/
-ENTRYPOINT ["java","--add-opens=java.base/java.lang=ALL-UNNAMED","--add-opens=java.base/java.util.concurrent.atomic=ALL-UNNAMED","-Djdk.util.zip.disableZip64ExtraFieldValidation=true","-cp","jifa:jifa/lib/*","org.eclipse.jifa.server.Launcher","--jifa.role=standalone-worker","--jifa.storage-path=/jifa-storage","--jifa.input-files[0]=/demo/thread-dump-demo.log","--jifa.input-files[1]=/demo/gc-log-demo.log","--jifa.input-files[2]=/demo/heap-dump-demo.hprof.gz"]
+ENTRYPOINT ["java","--add-opens=java.base/java.lang=ALL-UNNAMED","--add-opens=java.base/java.util.concurrent.atomic=ALL-UNNAMED","-Djdk.util.zip.disableZip64ExtraFieldValidation=true","-Dmat.oql.methodFilter=!*","-cp","jifa:jifa/lib/*","org.eclipse.jifa.server.Launcher","--jifa.role=standalone-worker","--jifa.storage-path=/jifa-storage","--jifa.input-files[0]=/demo/thread-dump-demo.log","--jifa.input-files[1]=/demo/gc-log-demo.log","--jifa.input-files[2]=/demo/heap-dump-demo.hprof.gz"]