• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Component/s: html5-notifier-plugin
• Labels:

  • csrf
  • mantis
• Environment:

  Debian x64

1. 

   mantis.jpg

   56 kB

   2012-03-19 15:44

[JENKINS-13138] Verify action doesn't work with CSRF option

Collapse comment: sogabe added a comment - 2012-03-19 16:40

sogabe added a comment - 2012-03-19 16:40

I can not reproduce it.
Let me know how to reporoduce?

Expand comment: sogabe added a comment - 2012-03-19 16:40

sogabe added a comment - 2012-03-19 16:40 I can not reproduce it. Let me know how to reporoduce?

Collapse comment: Sébastien Heurtematte added a comment - 2012-03-20 08:36

Sébastien Heurtematte added a comment - 2012-03-20 08:36

I was able to isolate the main problem.
It's due to another plugin : HTML5 Notifier Plugin which breaks CSRF protection.
There is an active bug about this problem : JENKINS-13038

You can reproduce with these steps :

• plugin mantis and html5 notifier in jenkins plugin directory
• activate CSRF protection with "Default Crumb Issuer"
• test verify action

Expand comment: Sébastien Heurtematte added a comment - 2012-03-20 08:36

Sébastien Heurtematte added a comment - 2012-03-20 08:36 I was able to isolate the main problem. It's due to another plugin : HTML5 Notifier Plugin which breaks CSRF protection. There is an active bug about this problem : JENKINS-13038 You can reproduce with these steps : plugin mantis and html5 notifier in jenkins plugin directory activate CSRF protection with "Default Crumb Issuer" test verify action

Collapse comment: sogabe added a comment - 2012-03-21 11:58

sogabe added a comment - 2012-03-21 11:58

html5-notifier SNAPSHOT will resolve this issue. So wait untill it released.

Expand comment: sogabe added a comment - 2012-03-21 11:58

sogabe added a comment - 2012-03-21 11:58 html5-notifier SNAPSHOT will resolve this issue. So wait untill it released.

Collapse comment: jieryn added a comment - 2012-04-06 12:27

jieryn added a comment - 2012-04-06 12:27

html5-notifier-plugin:1.2 was released: http://maven.jenkins-ci.org/content/repositories/releases/org/jenkins-ci/plugins/html5-notifier-plugin/1.2/

Expand comment: jieryn added a comment - 2012-04-06 12:27

jieryn added a comment - 2012-04-06 12:27 html5-notifier-plugin:1.2 was released: http://maven.jenkins-ci.org/content/repositories/releases/org/jenkins-ci/plugins/html5-notifier-plugin/1.2/