Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-48625

Several git repo browser URL formats are not checked or documented

XMLWordPrintable

      When filling the "Configure Repository Browser" in a multibranch pipeline Git section, or in a regular freestyle job, the URL format is not specified nor hinted for the following browsers:

      • Assembla
      • Gitiles
      • ViewGitWeb
      • GitBlit

      According to markewaite, the FormValidation needs some update for this browsers - and some automated tests would help for the FormValidation implementations.

          [JENKINS-48625] Several git repo browser URL formats are not checked or documented

          Christophe Carpentier created issue -
          Christophe Carpentier made changes -
          Link New: This issue is related to JENKINS-48064 [ JENKINS-48064 ]
          Mark Waite made changes -
          Assignee Original: Mark Waite [ markewaite ]
          Mark Waite made changes -
          Summary Original: The expected format of Fisheye browser URL is not explicitly documented New: Git repo browser URL formats are not checked or documented
          Mark Waite made changes -
          Summary Original: Git repo browser URL formats are not checked or documented New: Several git repo browser URL formats are not checked or documented
          Mark Waite made changes -
          Link New: This issue is related to JENKINS-48101 [ JENKINS-48101 ]
          Mark Waite made changes -
          Labels Original: git-plugin New: git-plugin newbie-friendly
          Rishabh Budhouliya made changes -
          Assignee New: Rishabh Budhouliya [ rishabhbudhouliya ]

          Rishabh Budhouliya added a comment -

          markewaite Hi, as mentioned by you earlier, there is a need to discuss the security threats related to the doCheck methods where on-the-fly validation needs an external connection. I hope we can discuss that issue here.

          Rishabh Budhouliya added a comment - markewaite Hi, as mentioned by you earlier, there is a need to discuss the security threats related to the doCheck methods where on-the-fly validation needs an external connection. I hope we can discuss that issue here.

          Rishabh Budhouliya added a comment -

          Also, since browsers like Fisheye have implemented the doCheckURL method and are currently working, that might be a security concern as well.

          Rishabh Budhouliya added a comment - Also, since browsers like Fisheye have implemented the doCheckURL method and are currently working, that might be a security concern as well.

            rishabhbudhouliya Rishabh Budhouliya
            saucistophe Christophe Carpentier
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: