-
Bug
-
Resolution: Fixed
-
Critical
-
None
-
Jenkins 2.46, Script Security Plugin 1.26
-
-
script-security 1218.v39ca_7f7ed0a_c
Since hudson.scm.EditType implementation has not changed in the last 10 years, I think either the white listing never ever worked, or (less likely?) the white listing syntax changed and in the past there was no differentiation between static and non-static fields.
Anyway, could you please change the following in "org/jenkinsci/plugins/scriptsecurity/sandbox/whitelists/jenkins-whitelist":
- From old:
field hudson.scm.EditType ADD field hudson.scm.EditType DELETE field hudson.scm.EditType EDIT
- => New:
staticField hudson.scm.EditType ADD staticField hudson.scm.EditType DELETE staticField hudson.scm.EditType EDIT
- is related to
-
JENKINS-30412 Access to build's own changelog from script
-
- Resolved
-
- links to
I apologize for the direct assignment to you, Jesse, but I dared to do that, because (a) you seem to be the official maintainer of the plugin (see https://wiki.jenkins-ci.org/display/JENKINS/Script+Security+Plugin) and (b) I hope this is a low hanging fruit