diff --git a/source/net/filebot/format/SecureCompiledScript.java b/source/net/filebot/format/SecureCompiledScript.java index 579d3926..099f16aa 100644 --- a/source/net/filebot/format/SecureCompiledScript.java +++ b/source/net/filebot/format/SecureCompiledScript.java @@ -27,14 +27,18 @@ public class SecureCompiledScript extends CompiledScript { Permissions permissions = new Permissions(); permissions.add(new RuntimePermission("createClassLoader")); - permissions.add(new RuntimePermission("accessDeclaredMembers")); - permissions.add(new RuntimePermission("accessClassInPackage.*")); + permissions.add(new RuntimePermission("getClassLoader")); permissions.add(new RuntimePermission("modifyThread")); + permissions.add(new RuntimePermission("modifyThreadGroup")); + permissions.add(new RuntimePermission("loadLibrary.*")); + permissions.add(new RuntimePermission("accessClassInPackage.*")); + permissions.add(new RuntimePermission("accessDeclaredMembers")); + permissions.add(new RuntimePermission("getenv.*")); + permissions.add(new RuntimePermission("getFileSystemAttributes")); + permissions.add(new RuntimePermission("readFileDescriptor")); permissions.add(new FilePermission("<>", "read")); permissions.add(new SocketPermission("*", "connect")); permissions.add(new PropertyPermission("*", "read")); - permissions.add(new RuntimePermission("getenv.*")); - permissions.add(new RuntimePermission("getFileSystemAttributes")); permissions.add(new ManagementPermission("monitor")); // write permissions for temp and cache folders