I\'m trying to sandbox JSR-223. Specifically, I don\'t want any script to have access to any of my classes. (I hear Rhino can do that with ClassShutter, but I want to do it
Is it possible to run the part of your application that requires the scripting engine in a separate JVM? You could start the scripting engine JVM with a different classpath (and security manager) and then use some form of lightweight message passing between the 2 JVMs.