René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Implicit unpermitted operations should be sandboxed","articleBody":"**Description**\r\n\r\nUnpermitted operations can be called implicitly. Need to sandbox them too.\r\n- in constructors of used classes\r\n- in static blocks\r\n- in private methods of other classes\r\n- in separate threads\r\n- ? probably, there are other cases to be added ?\r\n\r\n**To Reproduce**\r\n\r\nSteps to reproduce the behavior:\r\n\r\n1. Open IntelliJ IDEA with installed UTBot plugin (with Security Manager turned on)\r\n2. Open/create a project with JDK 8/11\r\n3. Add the following class:\r\n\r\n~~~java\r\nimport java.io.File;\r\nimport java.io.IOException;\r\n\r\nclass A {\r\n    A () throws IOException {\r\n        File a = new File(\"a.txt\");\r\n        a.createNewFile();\r\n    }\r\n}\r\n\r\npublic class SecurityCheck {\r\n\r\n    public int read(A a)  {\r\n        return 10;\r\n    }\r\n}\r\n~~~\r\n\r\n4. Generate tests for the SecurityCheck.read method - with Mocking on\r\n\r\n**Expected behavior**\r\n\r\nGenerated test is supposed to be disabled with sandbox-related comment.\r\nNo file must be created by user's code during test generation.\r\n\r\n**Actual behavior**\r\n\r\nSuccessful test is generated.\r\nFile \"a.txt\" is created during test generation.\r\n\r\n**Visual proofs (screenshots, logs, images)**\r\n\r\n~~~java\r\n    @Test\r\n    @DisplayName(\"read: a = A() -\u003e return 10\")\r\n    public void testReadReturns10() throws IOException {\r\n        SecurityCheck securityCheck = new SecurityCheck();\r\n        A a = new A();\r\n\r\n        int actual = securityCheck.read(a);\r\n\r\n        assertEquals(10, actual);\r\n    }\r\n~~~\r\n\r\n![image](https://user-images.githubusercontent.com/37301492/186685093-41bea2c6-8fbf-4ca3-922b-b4074141096a.png)\r\n\r\n**Environment**\r\n\r\nIntelliJ IDEA 2022.1 - 2022.1.4\r\nJDK 8/11\r\n\r\n**Additional context**\r\n\r\nStatic blocks are being executed without sandbox either:\r\n\r\n~~~java\r\nimport java.io.File;\r\n\r\nclass A {\r\n    static {\r\n        new File(\"a.txt\").renameTo(new File(\"b.txt\"));\r\n    }\r\n}\r\n\r\npublic class AnotherCheck {\r\n\r\n    public int read(A a)  {\r\n        return 10;\r\n    }\r\n\r\n}\r\n~~~","author":{"url":"https://github.com/alisevych","@type":"Person","name":"alisevych"},"datePublished":"2022-08-25T13:50:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/791/UTBotJava/issues/791"}