-
Improvement
-
Resolution: Fixed
-
Minor
-
None
We currently only have Collections.sort whiltelisted, but every method in this class is a static utility method that is safe. Also need to whitelist a couple of Throwable.printStackTrace variations. JENKINS-57344 already whitelisted a few java.io methods to make it possible to write to a StringWriter, so together this will make it possible to log more detailed error messages that include exception stacktraces and make it easier to troubleshoot some issues.
[JENKINS-60210] Whitelist all java.util.Collections methods
Status | Original: Open [ 1 ] | New: In Progress [ 3 ] |
Status | Original: In Progress [ 3 ] | New: In Review [ 10005 ] |
Resolution | New: Fixed [ 1 ] | |
Status | Original: In Review [ 10005 ] | New: Fixed but Unreleased [ 10203 ] |
PR: https://github.com/jenkinsci/script-security-plugin/pull/280