• 2.171

      From https://twitter.com/scy/status/1112663270341644289 it looks like Jenkins setup wizard does not properly escape some form fields and processes them as code ( ? ).

          [JENKINS-56856] Setup wizards handles password field wrong

          Gavin Mogan added a comment -

          Did some quick investigation and found out that while all the other fields were escaped, the large json blob was not, so jetty didn't know how to handled the non escaped data.

          Gavin Mogan added a comment - Did some quick investigation and found out that while all the other fields were escaped, the large json blob was not, so jetty didn't know how to handled the non escaped data.

          Gavin Mogan added a comment -

          Gavin Mogan added a comment - https://github.com/jenkinsci/jenkins/pull/3960

            halkeye Gavin Mogan
            danielbeck Daniel Beck
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: