We currently only have Collections.sort whiltelisted, but every method in this class is a static utility method that is safe. Also need to whitelist a couple of Throwable.printStackTrace variations. JENKINS-57344 already whitelisted a few java.io methods to make it possible to write to a StringWriter, so together this will make it possible to log more detailed error messages that include exception stacktraces and make it easier to troubleshoot some issues.

          [JENKINS-60210] Whitelist all java.util.Collections methods

          Hari Dara added a comment -

          Hari Dara added a comment - PR:  https://github.com/jenkinsci/script-security-plugin/pull/280

          Hari Dara added a comment -

          PR merged.

          Hari Dara added a comment - PR merged.

            haridsv Hari Dara
            haridsv Hari Dara
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: