Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-63391

Disabled permission tooltips broken on Chrome

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • matrix-auth-plugin
    • None
    • matrix-auth:2.6.2
    • matrix-auth-3.1.1

      When a permission is implied by another one (e.g. Run/Reply implied by Job/Configure), the disabled tooltip is using the attribute "title" and will display an information that is not un-escaped.

      Introduced during SECURITY-1909.

        1. matrix-auth_2.6.1_disabled.png
          matrix-auth_2.6.1_disabled.png
          7 kB
        2. matrix-auth_2.6.1_enabled.png
          matrix-auth_2.6.1_enabled.png
          2 kB
        3. matrix-auth_2.6.2_disabled.png
          matrix-auth_2.6.2_disabled.png
          15 kB
        4. matrix-auth_2.6.2_enabled.png
          matrix-auth_2.6.2_enabled.png
          2 kB

            danielbeck Daniel Beck
            wfollonier Wadeck Follonier
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: