Better access

core/assets/scripts/base.js

@@ -0,0 +1 @@
+const extend = Java.extend

core/assets/scripts/global.js

@@ -358,3 +358,6 @@ const LiquidModule = Java.type('io.anuke.mindustry.world.modules.LiquidModule')
 const PowerModule = Java.type('io.anuke.mindustry.world.modules.PowerModule')
 const Produce = Java.type('io.anuke.mindustry.world.producers.Produce')
 const ProduceItem = Java.type('io.anuke.mindustry.world.producers.ProduceItem')
+
+const extend = Java.extend
+

core/src/io/anuke/mindustry/mod/Scripts.java

@@ -6,7 +6,10 @@ import io.anuke.arc.util.*;
 import io.anuke.mindustry.mod.Mods.*;
 import org.graalvm.polyglot.*;
 
+import java.io.*;
+
 public class Scripts{
+    private static final Class[] denied = {FileHandle.class, InputStream.class, File.class, Scripts.class, Files.class};
     private final Context context;
     private final String wrapper;
 
@@ -15,11 +18,9 @@ public class Scripts{
         Context.Builder builder = Context.newBuilder("js").allowHostClassLookup(ClassAccess.allowedClassNames::contains);
 
         HostAccess.Builder hb = HostAccess.newBuilder();
-        for(Class c : ClassAccess.allowedClasses){
-            hb.allowImplementations(c);
-            Structs.each(hb::allowAccess, c.getConstructors());
-            Structs.each(hb::allowAccess, c.getFields());
-            Structs.each(hb::allowAccess, c.getMethods());
+        hb.allowPublicAccess(true);
+        for(Class c : denied){
+            hb.denyAccess(c);
         }
         builder.allowHostAccess(hb.build());