-
Bug
-
Resolution: Fixed
-
Minor
-
Jenkins 2.16, Git Plugin 2.5.3, gogs-webhook 1.0.2
Thanks for making a plugin to support the Gogs git self-hosting service!
When Gogs sends a webhook, it issues a POST request with a bunch of information in JSON format. With "Prevent Cross Site Request Forgery exploits" enabled in Jenkins (which is the default for new installs of Jenkins 2.x), Gogs' webhooks are blocked because they don't have a crumb associated with them.
Would it be possible to add a CrumbExclusion similar to the one found in the Github plugin ( https://github.com/jenkinsci/github-plugin/commit/5c2a041 )? That would allow us to leave CSRF protection enabled and still get working webhooks.