• Icon: Bug Bug
    • Resolution: Won't Fix
    • Icon: Minor Minor
    • script-security-plugin
    • Jenkins 1.625.3
      workflow-plugin 1.13

      XmlSlurper.parseText() is not allowed for script approval, it is denied immediately in JenkinsFile SandBox:

      Scripts not permitted to use method groovy.util.XmlSlurper parseText java.lang.String
      

          [JENKINS-33024] XmlSlurper.parseText() not whitelisted

          Flávio Augusto Valones created issue -
          Flávio Augusto Valones made changes -
          Labels Original: workflow New: multibranch workflow
          Flávio Augusto Valones made changes -
          Link New: This issue is related to JENKINS-33049 [ JENKINS-33049 ]
          Flávio Augusto Valones made changes -
          Link New: This issue is related to JENKINS-33049 [ JENKINS-33049 ]
          Flávio Augusto Valones made changes -
          Link Original: This issue is related to JENKINS-33049 [ JENKINS-33049 ]
          Jesse Glick made changes -
          Labels Original: multibranch workflow New: workflow
          Priority Original: Major [ 3 ] New: Minor [ 4 ]
          Summary Original: XmlSlurper.parseText() are Not Permitted in JenkinsFile SandBox New: XmlSlurper.parseText() not whitelisted

          Andrew Bayer added a comment -

          jglick - not sure if this should be whitelisted - your thoughts?

          Andrew Bayer added a comment - jglick - not sure if this should be whitelisted - your thoughts?
          Andrew Bayer made changes -
          Assignee Original: Jesse Glick [ jglick ] New: Andrew Bayer [ abayer ]


          I use XmlSlurper.parseText() to read some information from pom.xml file, but in the sandbox I do not even have the option to approve it or not.

          Flávio Augusto Valones added a comment - I use XmlSlurper.parseText() to read some information from pom.xml file, but in the sandbox I do not even have the option to approve it or not.

          Jesse Glick added a comment -

          Probably the same issues as JENKINS-35140.

          Jesse Glick added a comment - Probably the same issues as JENKINS-35140 .
          Jesse Glick made changes -
          Link New: This issue is related to JENKINS-35140 [ JENKINS-35140 ]

            abayer Andrew Bayer
            valones Flávio Augusto Valones
            Votes:
            1 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: