[JENKINS-63391] Disabled permission tooltips broken on Chrome - Jenkins Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Minor
Resolution: Fixed
Component/s: matrix-auth-plugin
Labels:
None
Environment:
matrix-auth:2.6.2

Similar Issues:

Show
Released As:
matrix-auth-3.1.1

Description

When a permission is implied by another one (e.g. Run/Reply implied by Job/Configure), the disabled tooltip is using the attribute "title" and will display an information that is not un-escaped.

Introduced during SECURITY-1909.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

matrix-auth_2.6.1_disabled.png
7 kB
2020-08-13 10:15
matrix-auth_2.6.1_enabled.png
2 kB
2020-08-13 10:16
matrix-auth_2.6.2_disabled.png
15 kB
2020-08-13 10:16
matrix-auth_2.6.2_enabled.png
2 kB
2020-08-13 10:16

Activity

Ascending order - Click to sort in descending order

Daniel Beck added a comment - 2022-03-01 21:57

Good news: ~~JENKINS-67902~~ means there are no tooltips anymore

Daniel Beck added a comment - 2022-03-01 21:57 Good news: JENKINS-67902 means there are no tooltips anymore

Daniel Beck added a comment - 2022-04-20 09:44

Better news: The cause for ~~JENKINS-67902~~ apparently changed tooltips enough that the fix for ~~JENKINS-67902~~ will take care of this too.

Daniel Beck added a comment - 2022-04-20 09:44 Better news: The cause for JENKINS-67902 apparently changed tooltips enough that the fix for JENKINS-67902 will take care of this too.

Daniel Beck added a comment - 2022-05-03 20:05

This is fixed by a core change that the plugin was adapted to in 3.1.1.

Daniel Beck added a comment - 2022-05-03 20:05 This is fixed by a core change that the plugin was adapted to in 3.1.1.

People

Assignee:: Daniel Beck

Reporter:: Wadeck Follonier

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 2020-08-13 10:16

Updated:: 2022-05-03 20:05

Resolved:: 2022-05-03 20:05