Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-24249

Dynamic pop-up menus don't appear when "Prevent Cross Site Request Forgery exploits" is enabled

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • _unsorted, core
    • None
    • Jenkins v1.575, jenkins stand-alone war file
      ginx as a proxy server in front of jenkins

      When enabling the Global Security option "Prevent Cross Site Request Forgery exploits", the dynamic pop-up menus stop working (they dont appear at all anymore).

      This applies to the Job menu in a view, to items in the Build Queue and the Build Executor Status, and to the "Jenkins" breadcrumb menu (top-left corner), so seems to apply to all menus.

      "Crumb Algorithm" = "Default Crumb Issuer", and "Enable proxy compatibility" doesnt seem to make any difference.

          [JENKINS-24249] Dynamic pop-up menus don't appear when "Prevent Cross Site Request Forgery exploits" is enabled

          Stefan Thurnherr created issue -
          Stefan Thurnherr made changes -
          Component/s New: gui [ 15492 ]
          Stefan Thurnherr made changes -
          Environment Original: Jenkins v1.575, jenkins stand-alone war file
          * nginx as a proxy server in front of jenkins.
          New: Jenkins v1.575, jenkins stand-alone war file
          ginx as a proxy server in front of jenkins
          Daniel Beck made changes -
          Resolution New: Duplicate [ 3 ]
          Status Original: Open [ 1 ] New: Resolved [ 5 ]
          Daniel Beck made changes -
          Link New: This issue duplicates JENKINS-12875 [ JENKINS-12875 ]
          Jenkins IRC Bot made changes -
          Component/s New: core [ 15593 ]
          Component/s Original: gui [ 15492 ]
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 157129 ] New: JNJira + In-Review [ 195618 ]
          Jenkins IRC Bot made changes -
          Component/s New: _unsorted [ 19622 ]
          Component/s Original: security [ 15508 ]

            Unassigned Unassigned
            stefanthurnherr Stefan Thurnherr
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: