public final Enum ExpressionLanguageFeatureLevel

This level allows what is allowed with the bean-properties level plus bean methods execution and can lead to serious security issues, including arbitrary code execution, if not very carefully handled.

If using this level, you need to be sure you are not injecting user input in an expression without properly escaping it using HibernateConstraintValidatorContext#addExpressionVariable(String, Object).

Only allows to what is allowed with the variables level plus access to bean properties.

This is the minimal level to have a specification-compliant implementation.

The default Expression Language feature level.

Depends on the context.

For standard constraint messages, it is ExpressionLanguageFeatureLevel#BEAN_PROPERTIES.

For custom violations, the default is ExpressionLanguageFeatureLevel#NONE and, if Expression Language is enabled for a given custom violation via the API, the default becomes ExpressionLanguageFeatureLevel#VARIABLES in the context of this given custom violation.

Expression Language expressions are not interpolated.

Only allows access to the variables injected via HibernateConstraintValidatorContext#addExpressionVariable(String, Object), the Jakarta Bean Validation-defined formatter and the ResourceBundles.