沙盒Groovy和Java：执行Groovy脚本

Question

任务：使用Groovy沙盒执行Groovy脚本：

• http://groovy.codehaus.org/api/overview-summary.html
• http://groovy-sandbox.kohsuke.org/

要执行的Groovy脚本：

query.reverse(); // QUERY is a some string that should be reversed

文件 "GroovyScriptSandbox.groovy" 应该获得两个参数（脚本和此脚本的值）：

package test.my.groovy.sandbox

import org.codehaus.groovy.control.CompilerConfiguration
import org.codehaus.groovy.control.customizers.ImportCustomizer
import org.codehaus.groovy.control.customizers.SecureASTCustomizer
import org.springframework.stereotype.Component


@Component
class GroovyScriptSandbox {

def config
def shell


    public String runScript(final String script, final String query) {
        final ImportCustomizer imports = new ImportCustomizer()
                                                .addStarImports('groovyx.net.http')
                                                .addStaticStars('groovyx.net.http.ContentType', 'groovyx.net.http.Method')
        config = new CompilerConfiguration()
        config.addCompilationCustomizers(imports)
        def newScript = "{ query -> " + script + "}"

        shell = new GroovyShell(config)
        def clos = shell.evaluate(newScript)
        return clos.call(query)
    }
}

执行“GroovyScriptSandbox.groovy”的Java方法：

@Resource
private GroovyScriptSandbox groovyScriptSandbox;

@RequestMapping(value = "/run", method = RequestMethod.POST)
@ResponseBody
public String runScript(@RequestParam("script") final String script, 
                       @RequestParam("query") final String query) {
    return groovyScriptSandbox.runScript(script, query);
}

如果这样，一切都运转良好：

• Java控制器获取script参数等于"query.reverse()"和query参数等于"0123"
• Groovy文件在沙箱中执行脚本"query.reverse()"，其中query等于"0123"
• 结果等于"3210"

问题： 我想用"GroovyScriptSandbox.java"替换"GroovyScriptSandbox.groovy"文件，但我不知道如何用Java编写相同的Groovy代码。

- Lugaru

Answer 1

最终找到了解决方案：

public String scriptRunner(final String script, final String query) {
    final ImportCustomizer imports = new ImportCustomizer();
    imports.addStaticStars("java.lang.Math");
    imports.addStarImports("groovyx.net.http");
    imports.addStaticStars("groovyx.net.http.ContentType", "groovyx.net.http.Method");

    final SecureASTCustomizer secure = new SecureASTCustomizer();
    secure.setClosuresAllowed(true);

    final CompilerConfiguration config = new CompilerConfiguration();
    config.addCompilationCustomizers(imports, secure); 

    final Binding intBinding = new Binding(); // alow parameters in the script
    intBinding.setVariable("query", query);

    final GroovyShell shell = new GroovyShell(intBinding, config); // create shall

    // code execution
    final Object clos = shell.evaluate(script);  

    if (clos == null) {
        return "No result avalible!";
    }
    return clos.toString();
}

- Lugaru