FreeMarker template com.atlassian.extras.core.DefaultProductLicense.getOrganisation() blocked by FreeMarker allowlist

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Low
    • 12.1.6
    • Affects Version/s: 12.1.3
    • Component/s: Builds
    • None
    • 1
    • Severity 3 - Minor
    • 1

      Issue Summary

      The FreeMarker allowlist freemarker-allowlist.properties does not include com.atlassian.extras.core.DefaultProductLicense.getOrganisation().

      Steps to Reproduce

      N/A

      Expected Results

      Method should be allowed

      Actual Results

      The below exception is thrown in the atlassian-bamboo.log file:

      Caused by: java.lang.IllegalAccessException: Forbidden method invocation: com.atlassian.extras.core.DefaultProductLicense.getOrganisation()	at com.atlassian.bamboo.freemarker.allowlist.BambooFreemarkerAllowlistBeansWrapper.invokeMethod(BambooFreemarkerAllowlistBeansWrapper.java:68)	at freemarker.ext.beans.BeanModel.invokeThroughDescriptor(BeanModel.java:298)	at freemarker.ext.beans.BeanModel.get(BeanModel.java:191) 

       

      Workaround

      1. Take a backup of <BAMBOO_INSATLL_DIR>/atlassian-bamboo/WEB-INF/classes/freemarker-allowlist.properties
      2. Add the below method to the end of the file like below:

      ,\ 
com.atlassian.extras.core.DefaultProductLicense.getOrganisation()

      3. Restart the Bamboo

       

              Assignee:
              Alexey Chystoprudov
              Reporter:
              Jyothi Charupalli
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: