javascript - 无法通过 HTTP API 执行 javascript 命令

Question

我尝试通过 HTTP API 执行 JavaScript 命令，如下所示:

    curl -X POST -H "Content-Type:application/json" -H "Authorization:Basic     YWRtaW46aWRlYWw0ODI2" -H "Cache-Control:no-cache" -d '{ "transaction" : true,       "operations" : [         {          "type" : "script",          "language" : "javascript",          "script" : "orient.getGraph().createVertex('class:customer')"        }      ]    }' http://localhost:2480/batch/mydb

响应如下:

com.orientechnologies.orient.core.exception.OSecurityException:不允许执行语言“javascript”

版本详细信息(http 响应):
服务器 →OrientDB Server v.1.7.8(版本未知@r${buildNumber}；2014-08-13 15:56:07+0200)

这是怎么回事!？
谢谢您

Answer 1

这是出于安全原因。要允许 JS 脚本，请打开 config/orientdb-server-config.xml 文件并更改 OServerSideScriptInterpreter 组件:

    <!-- SERVER SIDE SCRIPT INTERPRETER. WARNING! THIS CAN BE A SECURITY HOLE:
        ENABLE IT ONLY IF CLIENTS ARE TRUCT, TO TURN ON SET THE 'ENABLED' PARAMETER
        TO 'true' -->
    <handler
            class="com.orientechnologies.orient.server.handler.OServerSideScriptInterpreter">
        <parameters>
            <parameter name="enabled" value="true"/>
            <parameter name="allowedLanguages" value="SQL,Javascript"/>
        </parameters>
    </handler>