neo4j/community — pull request #944 by jakewins (2012-10-25 15:07:57+00:00)
Title: Updated javascript engine to incorporate an improved level of sandboxing

This introduces a modified Rhino engine into the server, which uses a white list of classes that code executing within the javascript environment is allowed to access. This white list will need to be expanded, but this should be done slowly and with care.

When reviewing this, please take the time to do some poking at it, and see if you are able to bypass the filters and do things like access the file system or create threads.

It's worth noting this currently is still susceptible to DOS through memory overflow and/or infinite loops. This is less of a concern, but should be adressed at some point.