Configuring Expression Evaluation

Last modified 03 Oct 2026 10:04 UTC
MidPoint Expression Language feature
This page describes configuration of MidPoint Expression Language midPoint feature. Please see the feature page for more details.

TODO expand these bullets

  • In order to prohibit unsafe (Groovy, Velocity, JavaScript, Python) expressions, it is possible to disable their execution right in the system configuration (so even midPoint administrator cannot enable their execution)

  • This is done by setting safeScriptingLanguagesOnly to true like this:

    <configuration>
    <midpoint>
	    <expressions>
	        <safeScriptingLanguagesOnly>true</safeScriptingLanguagesOnly>
    	</expressions>
    </midpoint>
</configuration>

    Any attempt to execute Groovy, full Velocity, JavaScript, or Python expressions will result in an error being signalled.

    This does not cover executing Groovy code in connectors!

  • In order to provide the required flexibility even with disabled general-purpose scripting languages, midPoint allows calling selected Java methods using newly-introduced javaMethodReference expression evaluator. These methods must reside in classes whose packages are explicitly allowed in the system configuration, like this:

    <configuration>
    <midpoint>
	    <expressions>
            <javaMethodEvaluatorPackageName>com.example.scripting.extensions</javaMethodEvaluatorPackageName>
            <javaMethodEvaluatorPackageName>...</javaMethodEvaluatorPackageName>
	    </expressions>
    </midpoint>
</configuration>

Please see Java Method Reference expression evaluator for details.

Was this page helpful?
YES NO
Thanks for your feedback