Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > Java > javax.script and access to private methods in a java class is allowed?

Thread Tools

javax.script and access to private methods in a java class is allowed?
Posts: n/a

I'm playing around with java scripting (JSR 223) and at the moment
I've hit upon a strange scenario which I'm not sure is a works as
intended or is some sort of bug either in the groovy implementation or
the JSR 223 implementation, or may be dumb user error, so figured I'd

I have a class that I expose to a script engine (groovy currently)
that has a method declared private. Yet I am finding that from the
script it is able to actually execute the method. So I'm not sure if
this is a bug or if when accessing a script if the access modifier is
total somehow disregarded.

The class that I have is as follows

public class testfoo2 {
private String blar;

public void setBlar(String foo){
System.out.println("Setting Blar to be =
blar = foo;

public String getBlar(){
System.out.println("getBlar() called");
return blar;

private String getBlar2(){
System.out.println("getBlar2() called in
return blar;


The code for evaluating a script that accesses this class is as

ScriptEngineManager factory = new ScriptEngineManager();
ScriptEngine engine =

testfoo2 flobber = new testfoo2();
engine.put("foo", flobber);
String script= " foo.setBlar(\"BLAR BLAR BLAR\");

The output that is generated is as follows

Setting Blar to be = BLAR BLAR BLAR
getBlar2() called in testfoo2
getBlar() called

Given that getBlar2() is a private method I would have expected some
kid of exception to be generated. But no such luck. So can anyone shed
any light on this? Do objects exposed to scripts loose all of their
access rights ? If so is there a recommended way around that to hide
such methods ?

I've also tried setting foo.blar as well from the script and even that
works directly ? And finally I did the same using the javascript
(Rhino) inbuilt engine and still the same. So still not sure how I can
safe guard a classes internals if basically I can access anything from
the class.

Any advice on this ?

Reply With Quote

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Is there a way to find the class methods of a class, just like'methods' finds the instance methods? Kenneth McDonald Ruby 5 09-26-2008 03:09 PM
Private methods not so private? Frank Meyer Ruby 14 08-02-2007 07:29 PM
Why is define_method private? Plus,what's the point of private methods? Daniel Finnie Ruby 3 12-16-2006 10:09 PM
Public Data in Private Class or Private Data in Public Class? DaveLessnau C++ 3 05-16-2005 06:53 PM
Re: Templates and friends and template methods with private methods. Buster Copley C++ 5 07-07-2003 12:50 AM