Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable variable assignment in SimpleEvaluationContext #30326

Closed
bclozel opened this issue Apr 13, 2023 · 0 comments
Closed

Disable variable assignment in SimpleEvaluationContext #30326

bclozel opened this issue Apr 13, 2023 · 0 comments
Assignees
Labels
in: core Issues in core modules (aop, beans, core, context, expression) status: backported An issue that has been backported to maintenance branches type: enhancement A general enhancement
Milestone

Comments

@bclozel
Copy link
Member

bclozel commented Apr 13, 2023

Currently, we do not differentiate between setting a SpEL variable programmatically versus within an expression even though the two actions are semantically different.

We should introduce infrastructure to differentiate between programmatically setting a variable in an EvaluationContext versus the assignment of a variable within a SpEL expression using the assignment operator (=). In addition, we should also disable variable assignment within expressions when using the SimpleEvaluationContext.

@bclozel bclozel added in: core Issues in core modules (aop, beans, core, context, expression) type: enhancement A general enhancement labels Apr 13, 2023
@bclozel bclozel added this to the 6.0.8 milestone Apr 13, 2023
@github-actions github-actions bot added status: backported An issue that has been backported to maintenance branches and removed for: backport-to-5.3.x labels Apr 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: core Issues in core modules (aop, beans, core, context, expression) status: backported An issue that has been backported to maintenance branches type: enhancement A general enhancement
Projects
None yet
Development

No branches or pull requests

2 participants