Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-33049

Groovy left-shift operator not whitelisted

XMLWordPrintable

      Groovy leftShift operator "<<" is not allowed for script approval, it is denied immediately only in JenkinsFile SandBox. The code:

      'AB' << 'CDE'

      Causes:

      Scripts not permitted to use staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods leftShift java.lang.String java.lang.Object

      In the job script editor works normally (appears for approval).

          [JENKINS-33049] Groovy left-shift operator not whitelisted

          Andrew Bayer added a comment -

          PR up at https://github.com/jenkinsci/script-security-plugin/pull/74

          Andrew Bayer added a comment - PR up at https://github.com/jenkinsci/script-security-plugin/pull/74

          SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Andrew Bayer
          Path:
          src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/generic-whitelist
          http://jenkins-ci.org/commit/script-security-plugin/986d5e307abdf1a9d8a682f74f9b50f977eea19a
          Log:
          [FIXED JENKINS-33049] Added DGM for leftShift to a String.

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Andrew Bayer Path: src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/generic-whitelist http://jenkins-ci.org/commit/script-security-plugin/986d5e307abdf1a9d8a682f74f9b50f977eea19a Log: [FIXED JENKINS-33049] Added DGM for leftShift to a String.

          SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Jesse Glick
          Path:
          src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/generic-whitelist
          http://jenkins-ci.org/commit/script-security-plugin/dc154002c0f8381ac1536a629951d373c79dad59
          Log:
          Merge pull request #74 from abayer/jenkins-33049

          [FIXED JENKINS-33049] Added DGM for leftShift to a String.

          Compare: https://github.com/jenkinsci/script-security-plugin/compare/1f5b6adddaaa...dc154002c0f8

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: src/main/resources/org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/generic-whitelist http://jenkins-ci.org/commit/script-security-plugin/dc154002c0f8381ac1536a629951d373c79dad59 Log: Merge pull request #74 from abayer/jenkins-33049 [FIXED JENKINS-33049] Added DGM for leftShift to a String. Compare: https://github.com/jenkinsci/script-security-plugin/compare/1f5b6adddaaa...dc154002c0f8

            abayer Andrew Bayer
            valones Flávio Augusto Valones
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: