Rustam Mehmandarov: Jakarta EL: safer rules without handwritten predicate parsers (opens in new tab)

(EL) is already part of the platform, but we usually meet it indirectly through Faces, CDI, or Bean Validation. In this post, we will use it directly: as a small in-process predicate engine for authorization policies. We will replace the handwritten parser from gem #2, keep the same policy file format, and then look at what it takes to make evaluation safe. Introduction If you’ve written Jakarta EE for any length of time, you’ve used Jakarta Expression Language (EL) whether you noticed it or ...