-
Notifications
You must be signed in to change notification settings - Fork 5
Sandbox
The sandbox is applied automatically when Leikr is ran by one of the scripts in the release zip, or if you run java -jar Leikr.jar
If you'd like to purposely run without a sandbox, you can add the parameter insecure to either the scripts or when you run from a terminal.
Since 1.0.5 Leikr is being transitioned away from using the Java Policy file which is proving difficult to manage with a single Jar, and instead favoring a custom Groovy Class Loader. This class loader has a checker that will flag specific packages and class names from being used.
The current list is as follows:
| Class | |
|---|---|
| "java.io.File" | |
| "java.lang.System" | |
| "java.lang.ClassLoader" | |
| "groovy.lang.GroovyClassLoader" | |
| "groovy.lang.GroovyShell" |
| Packages | |
|---|---|
| "java.net" |
The primary idea is to keep games and programs locked into the Leikr sub directory, and prevent them from access external resources including web calls. If I am missing some critical packages or classes for that please post an Issue so I can add and test it.