fix(deps): update dependency org.apache.commons:commons-jexl3 to v3.5.0

Author: renovate-bot

gradle/verification-metadata.xml

@@ -653,6 +653,11 @@
             <sha256 value="628df30148acd3c491cfcb6b73c7ae4b5989e5526ab13a2f428dea5d4ad10d7a" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="org.apache.commons" name="commons-parent" version="81">
+         <artifact name="commons-parent-81.pom">
+            <sha256 value="348d4e7c131be6114c854a719ce7a44307a7c39bd366084977b24fd29ad0edb4" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="org.checkerframework" name="checkerframework-gradle-plugin" version="0.6.37">
          <artifact name="checkerframework-gradle-plugin-0.6.37.jar">
             <sha256 value="f6c3f7c2d2fd68cead661b5b3a4ee3b27a337165c0f9634876d42aeb9e67bf32" origin="Generated by Gradle" reason="Artifact is not signed"/>

src/bom-thirdparty/build.gradle.kts

@@ -91,7 +91,7 @@ dependencies {
         api("org.apache-extras.beanshell:bsh:2.0b6")
         api("org.apache.commons:commons-collections4:4.5.0")
         api("org.apache.commons:commons-dbcp2:2.9.0")
-        api("org.apache.commons:commons-jexl3:3.2.1")
+        api("org.apache.commons:commons-jexl3:3.5.0")
         api("org.apache.commons:commons-jexl:2.1.1")
         api("org.apache.commons:commons-lang3:3.19.0") {
             because("User might still rely on commons-lang3")

src/dist/src/dist/expected_release_jars.csv

@@ -30,7 +30,7 @@
 211301,commons-dbcp2-2.9.0.jar
 563971,commons-io-2.20.0.jar
 267634,commons-jexl-2.1.1.jar
-462124,commons-jexl3-3.2.1.jar
+558963,commons-jexl3-3.5.0.jar
 924068,commons-jvm-4.7.3.jar
 709075,commons-lang3-3.19.0.jar
 73737,commons-logging-1.3.5.jar

src/functions/src/main/java/org/apache/jmeter/functions/Jexl3Function.java

@@ -26,6 +26,7 @@
 import org.apache.commons.jexl3.JexlEngine;
 import org.apache.commons.jexl3.JexlScript;
 import org.apache.commons.jexl3.MapContext;
+import org.apache.commons.jexl3.introspection.JexlPermissions;
 import org.apache.jmeter.engine.util.CompoundVariable;
 import org.apache.jmeter.samplers.SampleResult;
 import org.apache.jmeter.samplers.Sampler;
@@ -116,6 +117,8 @@ private static JexlEngine createJexlEngine() {
                 .cache(512)
                 .silent(true)
                 .strict(true)
+                // TODO: allow customization for the permissions
+                .permissions(JexlPermissions.UNRESTRICTED)
                 // debug is true by default an impact negatively performances
                 // by a factory of 10
                 // Use JexlInfo if necessary