Dotaz: Pentaho/Tomcat/Java - ako povolit spustanie skriptov

[GeorgeWH]

Zdravim,

mam Pentaho 9.4, PDI 9.4, Tomcat 9.0 a JRE 8.0.

Po spusteni reportu v Pentahu mi vyhodi chybu:

Error
Scripts are prevented from running by default in order to avoid potential remote code execution.  The system administrator must enable this capability.

Ta ista chyba je aj v Tomcat logu:

12:24:27,056 ERROR [AbstractReportProcessor] 1624491866: Report processing failed.
org.pentaho.reporting.engine.classic.core.ReportDataFactoryException: Scripts are prevented from running by default in order to avoid potential remote code execution.  The system administrator must enable this capability.

Kde to povolim? Blokuje to Tomcat alebo Java...?

Vdaka.

---

---

Odpovědi

[X]

https://github.com/pentaho/pentaho-reporting/blob/4f2027d6d4cdfc9808bcad5a68721213a39e3d31/engine/core/src/main/java/org/pentaho/reporting/engine/classic/core/modules/misc/beanshell/BSHExpression.java#L171

[X]

../classic-engine.properties

[GeorgeWH]

Ano, prave som to nasiel. Konkretne do tomcat/webapps/pentaho/WEB-INF/classes/classic-engine.properties treba pridat

org.pentaho.reporting.engine.classic.core.allowScriptEvaluation=true

[X]

Zepta se, k cemu je to "Pentaho" vubec dobry?

[GeorgeWH]

Citujem z wiki:

Pentaho is business intelligence (BI) software that provides data integration, OLAP services, reporting, information dashboards, data mining and extract, transform, load (ETL) capabilities.

My to pouzivame na data integration a reporting.