Details
-
Bug
-
Status: Closed (View Workflow)
-
Minor
-
Resolution: Fixed
-
None
-
matrix-auth:2.6.2
-
-
matrix-auth-3.1.1
Description
When a permission is implied by another one (e.g. Run/Reply implied by Job/Configure), the disabled tooltip is using the attribute "title" and will display an information that is not un-escaped.
Introduced during SECURITY-1909.
Attachments
Activity
| Field | Original Value | New Value |
|---|---|---|
| Summary | Disabled tooltips broken in the matrix | Disabled permission tooltips broken on Chrome |
| Status | Open [ 1 ] | In Progress [ 3 ] |
| Status | In Progress [ 3 ] | In Review [ 10005 ] |
Better news: The cause for JENKINS-67902 apparently changed tooltips enough that the fix for JENKINS-67902 will take care of this too.
This is fixed by a core change that the plugin was adapted to in 3.1.1.
| Released As | matrix-auth-3.1.1 | |
| Resolution | Fixed [ 1 ] | |
| Status | In Review [ 10005 ] | Closed [ 6 ] |
Good news:
JENKINS-67902means there are no tooltips anymore