Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-44987

List view section name do not resolve <div> tag anymore

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • sectioned-view-plugin
    • None
    • Jenkins ver. 2.46.3 LTS
      All plugins up-to-date
      Windows server 2012

      After we migrated from V2.46.2 to  V2.46.3 and updated all plugins the sectioned views do not display like before.

       

      The name field do not display this kind of syntax anymore :

      <div id="unstable_fitnesse_builds">Unstable FitNesse Builds</div>

      Thanks for your help.

       

      ./Frederic

       

          [JENKINS-44987] List view section name do not resolve <div> tag anymore

          This was disallowed explicitly as any markup or javascript could have been added.

          Oliver Gondža added a comment - This was disallowed explicitly as any markup or javascript could have been added.

          Frédéric Meyrou added a comment - - edited

          Thanks Olivier for this information. Security limitations are becoming a big hasshole... any chance we can continue to just work with Jenkins...when we use it with a less secure internal network agreement level?

          Frédéric Meyrou added a comment - - edited Thanks Olivier for this information. Security limitations are becoming a big hasshole... any chance we can continue to just work with Jenkins...when we use it with a less secure internal network agreement level?

          Oliver Gondža added a comment - - edited

          I suspect this "feature" was introduced by accident when html escaping was simply forgotten. The proper way to bring it back is to push the name through administrator configured formatter that can be more or less strict about what you pass in depending on how you feel about security.

          Oliver Gondža added a comment - - edited I suspect this "feature" was introduced by accident when html escaping was simply forgotten. The proper way to bring it back is to push the name through administrator configured formatter that can be more or less strict about what you pass in depending on how you feel about security.

          Code changed in jenkins
          User: Oliver Gondža
          Path:
          pom.xml
          src/main/java/hudson/plugins/sectioned_view/SectionedViewSection.java
          src/main/resources/hudson/plugins/sectioned_view/JobGraphsSection/main.jelly
          src/main/resources/hudson/plugins/sectioned_view/ListViewSection/main.jelly
          src/main/resources/hudson/plugins/sectioned_view/TestResultViewSection/main.jelly
          src/main/resources/hudson/plugins/sectioned_view/TextSection/main.jelly
          src/main/resources/hudson/plugins/sectioned_view/ViewListingSection/main.jelly
          src/test/java/hudson/plugins/sectioned_view/SectionedViewTest.java
          http://jenkins-ci.org/commit/sectioned-view-plugin/8524de2b59206de1aa7ca2d6d6eabe3ce09d8510
          Log:
          [FIXED JENKINS-44987] Push section names through markup formatter

          SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oliver Gondža Path: pom.xml src/main/java/hudson/plugins/sectioned_view/SectionedViewSection.java src/main/resources/hudson/plugins/sectioned_view/JobGraphsSection/main.jelly src/main/resources/hudson/plugins/sectioned_view/ListViewSection/main.jelly src/main/resources/hudson/plugins/sectioned_view/TestResultViewSection/main.jelly src/main/resources/hudson/plugins/sectioned_view/TextSection/main.jelly src/main/resources/hudson/plugins/sectioned_view/ViewListingSection/main.jelly src/test/java/hudson/plugins/sectioned_view/SectionedViewTest.java http://jenkins-ci.org/commit/sectioned-view-plugin/8524de2b59206de1aa7ca2d6d6eabe3ce09d8510 Log: [FIXED JENKINS-44987] Push section names through markup formatter

          Krip added a comment -

          Thanks olivergondza for the fix !

          Krip added a comment - Thanks olivergondza for the fix !

            tbingaman Timothy Bingaman
            fredericmeyrou Frédéric Meyrou
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: