-
Bug
-
Resolution: Fixed
-
Major
-
Jenkins ver. 1.651.2
Lockable Resources plugin 1.8
Reserved resources variable name will not work after the SECURITY-170 update so you need to use the workaround (-Dhudson.model.ParametersAction.safeParameters)
log :
May 16, 2016 10:32:48 AM hudson.model.ParametersAction filter
WARNING: Skipped parameter `Test` as it is undefined on `test_lock`. Set `-Dhudson.model.ParametersAction.keepUndefinedParameters`=true to allow undefined parameters to be injected as environment variables or `-Dhudson.model.ParametersAction.safeParameters=[comma-separated list]` to whitelist specific parameter names, even though it represents a security breach
May 16, 2016 10:32:48 AM hudson.model.ParametersAction filter
WARNING: Skipped parameter `Test` as it is undefined on `test_lock`. Set `-Dhudson.model.ParametersAction.keepUndefinedParameters`=true to allow undefined parameters to be injected as environment variables or `-Dhudson.model.ParametersAction.safeParameters=[comma-separated list]` to whitelist specific parameter names, even though it represents a security breach
May 16, 2016 10:35:19 AM winstone.Logger logInternal
- links to
[JENKINS-34853] plugin inpact by SECURITY-170
Code changed in jenkins
User: Antonio
Path:
pom.xml
src/main/java/org/jenkins/plugins/lockableresources/actions/ResourceVariableNameAction.java
src/main/java/org/jenkins/plugins/lockableresources/queue/LockRunListener.java
src/main/resources/index.jelly
src/main/resources/org/jenkins/plugins/lockableresources/LockStep/config.jelly
src/main/resources/org/jenkins/plugins/lockableresources/LockableResource/config.jelly
src/main/resources/org/jenkins/plugins/lockableresources/LockableResourcesManager/config.jelly
src/main/resources/org/jenkins/plugins/lockableresources/RequiredResourcesProperty/config.jelly
src/test/java/org/jenkins/plugins/lockableresources/BasicIntegrationTest.java
http://jenkins-ci.org/commit/lockable-resources-plugin/b4ff2feb925e10b7d6a6e1bff760049062106585
Log:
Merge pull request #31 from amuniz/JENKINS-34853
JENKINS-34853 Inject required resources environment variable
Compare: https://github.com/jenkinsci/lockable-resources-plugin/compare/a57c50c636a1...b4ff2feb925e
Code changed in jenkins
User: Antonio Muñiz
Path:
pom.xml
src/main/java/org/jenkins/plugins/lockableresources/actions/ResourceVariableNameAction.java
src/main/java/org/jenkins/plugins/lockableresources/queue/LockRunListener.java
src/test/java/org/jenkins/plugins/lockableresources/BasicIntegrationTest.java
http://jenkins-ci.org/commit/lockable-resources-plugin/5c19ed7a2887a41dac999876b1d9381bf414732b
Log:
JENKINS-34853Inject required resources environment as a custom Action. Acknowledge SECURITY-170