Channels
#announcements
- b
bsideup
05/13/2016, 3:11 PMI mean, when I execute Kotlin script from my code, I want to make sure that it will not call anything except DSL methods I provide. It's kind of a critical requirement for my project 😞 - y
yole
05/13/2016, 3:12 PMthere is no supported API to do that, but if you don’t mind using internal unstable APIs, then you can achieve that - b
bsideup
05/13/2016, 3:13 PMsure - m
mikehearn
05/13/2016, 3:15 PMit can also be done with supported APIs (or only one unsupported API) if you compile to bytecode and then use ASM to check the linkage before loading, in a custom classloader - b
bsideup
05/13/2016, 3:16 PMit's a bit complicated because I'll have to analyze JVM bytecode, not the AST of Kotlin - m
mikehearn
05/13/2016, 3:18 PMbytecode is actually simpler than the AST - m
mikehearn
05/13/2016, 3:19 PMespecially because actually you'd only need to examine the constant pool (and forbid the use of bytecodes like invokedynamic). - m
mikehearn
05/13/2016, 3:19 PMof course you can go wrong if there's a subclass or an interface which is backed by a "bad" implementation but you have the same issues with the AST - m
mikehearn
05/13/2016, 3:19 PMif you look at the ASM Class/MethodVisitor API it's very easy to use - m
mikehearn
05/13/2016, 3:20 PModdly enough this is a requirement in my current project too, so I know exactly how much code is required 🙂 - b
bsideup
05/13/2016, 3:22 PM:D btw, it even worse for me - code wouldn't compile until I analyze it and provide proper classpath - k
kirillrakhman
05/13/2016, 3:23 PMWhat on earth are you people doing? I blame Gradle for starting the trend of writing configurations in turing complete languages 😂 - o
orangy
05/13/2016, 3:23 PMScripting games, I suppose - b
bsideup
05/13/2016, 3:23 PMWell, I want something similar to Grapes from Groovy - b
bsideup
05/13/2016, 3:24 PMBut with some control from my side - m
mikehearn
05/13/2016, 3:24 PMnot quite. my current project involves mobile code. - m
mikehearn
05/13/2016, 3:24 PMand for various reasons we want something more restrictive than a normal JVM sandbox - b
bsideup
05/13/2016, 3:24 PMNot mobile, but +1 :) - m
mikehearn
05/13/2016, 3:24 PMif you only care about classes rather than methods, by the way, you can enforce it purely with a ClassLoader too - k
kirillrakhman
05/13/2016, 3:25 PMis the user the one writing code in your applications? - b
bsideup
05/13/2016, 3:27 PMMy app allows users to describe some flow with DSL - k
kirillrakhman
05/13/2016, 3:27 PMhave you looked at DSL frameworks like Xtext? - b
bsideup
05/13/2016, 3:27 PMYes - b
bsideup
05/13/2016, 3:28 PMBut... Really? I'm being asked to take a look at Eclipse's project in a chat for JB's product?)))))))))) - k
kirillrakhman
05/13/2016, 3:28 PMI'm not JB 😛 - m
mikehearn
05/13/2016, 3:28 PMoh, just to clarify, by "mobile code" i meant possibly malicious code downloaded over the network - k
kirillrakhman
05/13/2016, 3:29 PMalso, it's because I've worked with Xtext, and it's kinda cool. Also there is IntelliJ support, AFAIK - k
kirillrakhman
05/13/2016, 3:29 PMbut not very mature - r
Ruckus
05/13/2016, 3:36 PMAnyone else having issues with
after upgrading to 1.0.2? I'm getting a "Couldn't inline method call of 'arrayOf' into ..." error.arrayOf(...) - u
udalov
05/13/2016, 3:44 PM@Ruckus: please report at https://youtrack.jetbrains.com/issues/KT