• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Component/s: html5-notifier-plugin
• Labels:

  • csrf
  • mantis
• Environment:

  Debian x64

1. 

   mantis.jpg

   56 kB

   2012-03-19 15:44

[JENKINS-13138] Verify action doesn't work with CSRF option

Sébastien Heurtematte created issue - 2012-03-19 15:44

Collapse comment: sogabe added a comment - 2012-03-19 16:40

sogabe added a comment - 2012-03-19 16:40

I can not reproduce it.
Let me know how to reporoduce?

Expand comment: sogabe added a comment - 2012-03-19 16:40

sogabe added a comment - 2012-03-19 16:40 I can not reproduce it. Let me know how to reporoduce?

Collapse comment: Sébastien Heurtematte added a comment - 2012-03-20 08:36

Sébastien Heurtematte added a comment - 2012-03-20 08:36

I was able to isolate the main problem.
It's due to another plugin : HTML5 Notifier Plugin which breaks CSRF protection.
There is an active bug about this problem : JENKINS-13038

You can reproduce with these steps :

• plugin mantis and html5 notifier in jenkins plugin directory
• activate CSRF protection with "Default Crumb Issuer"
• test verify action

Expand comment: Sébastien Heurtematte added a comment - 2012-03-20 08:36

Sébastien Heurtematte added a comment - 2012-03-20 08:36 I was able to isolate the main problem. It's due to another plugin : HTML5 Notifier Plugin which breaks CSRF protection. There is an active bug about this problem : JENKINS-13038 You can reproduce with these steps : plugin mantis and html5 notifier in jenkins plugin directory activate CSRF protection with "Default Crumb Issuer" test verify action

Collapse comment: sogabe added a comment - 2012-03-21 11:58

sogabe added a comment - 2012-03-21 11:58

html5-notifier SNAPSHOT will resolve this issue. So wait untill it released.

Expand comment: sogabe added a comment - 2012-03-21 11:58

sogabe added a comment - 2012-03-21 11:58 html5-notifier SNAPSHOT will resolve this issue. So wait untill it released.

sogabe made changes - 2012-03-21 11:58

Component/s		New: html5-notifier [ 15951 ]
Component/s	Original: mantis [ 15517 ]
Assignee	Original: sogabe [ sogabe ]
Description	Original: Etat HTTP 403 - No valid crumb was included in the request	New: Etat HTTP 403 - No valid crumb was included in the request

Collapse comment: jieryn added a comment - 2012-04-06 12:27

jieryn added a comment - 2012-04-06 12:27

html5-notifier-plugin:1.2 was released: http://maven.jenkins-ci.org/content/repositories/releases/org/jenkins-ci/plugins/html5-notifier-plugin/1.2/

Expand comment: jieryn added a comment - 2012-04-06 12:27

jieryn added a comment - 2012-04-06 12:27 html5-notifier-plugin:1.2 was released: http://maven.jenkins-ci.org/content/repositories/releases/org/jenkins-ci/plugins/html5-notifier-plugin/1.2/

jieryn made changes - 2012-04-06 12:27

Resolution		New: Fixed [ 1 ]
Status	Original: Open [ 1 ]	New: Closed [ 6 ]

R. Tyler Croy made changes - 2016-07-25 23:59

Workflow

Original: JNJira [ 143601 ]

New: JNJira + In-Review [ 205745 ]