-
v2.5.4-dev — Plugin Sandboxing & Security Pre-release
released this
2026-05-12 18:50:09 +02:00 | 90 commits to main since this releasev2.5.4-dev
Plugin Ecosystem — Sandboxing & Security
Added
- BytecodeScanner: ASM-based forbidden reference detection in plugin JARs
- PluginSandboxService: JPMS isolation validation, lifecycle hook timeouts, resource limits per trust tier
- PluginSandboxController: /sandbox/scan and /{id}/sandbox/limits endpoints
- PluginLoaderService: integrated JPMS check and timeout-guarded onLoad/onUnload
- Plugin entity: scanClean, sandboxEnabled, lifecycleTimeoutMs, messageTimeoutMs, maxLogsPerMinute
- ASM 9.7.1 dependency
- Migration V20: plugin sandbox columns
Workflow Status
- Pending: Compose Smoke Test, Migration Validation, CodeQL
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads