-
Task
-
Resolution: Fixed
-
Minor
Core uses handlebars (*.hbs files) 3.0.8. Updating to 4.x requires a few tweaks to existing handlebars logic in core, to address security standards properly:
16:24:10 [INFO] Handlebars: Access has been denied to resolve the property "installWizard_welcomePanel_title" because it is not an "own property" of its parent. 16:24:10 [INFO] You can add a runtime option to disable the check or this warning: 16:24:10 [INFO] See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
There are a few more locations in core that need a few tweaks, additional information about this can be found here: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
While updating handlebars, handlebars-loader should be updated too.
[JENKINS-68926] Update handlebars from 3.x to 4.x
Description |
Original:
Core uses handlebars (*.hbs files) 3.0.8. Updating to 4.x requires a few tweaks to existing handlebars logic in core, to address security standards properly:
{code:java} 16:24:10 [INFO] Handlebars: Access has been denied to resolve the property "installWizard_welcomePanel_title" because it is not an "own property" of its parent. 16:24:10 [INFO] You can add a runtime option to disable the check or this warning: 16:24:10 [INFO] See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details {code} There are a few more locations in core that need a few tweaks, additional information about this can be found here: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details |
New:
Core uses handlebars (*.hbs files) 3.0.8. Updating to 4.x requires a few tweaks to existing handlebars logic in core, to address security standards properly:
{code:java} 16:24:10 [INFO] Handlebars: Access has been denied to resolve the property "installWizard_welcomePanel_title" because it is not an "own property" of its parent. 16:24:10 [INFO] You can add a runtime option to disable the check or this warning: 16:24:10 [INFO] See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details {code} There are a few more locations in core that need a few tweaks, additional information about this can be found here: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details While updating handlebars, {{handlebars-loader}} should be updated too. |
Assignee | New: Thorsten Scherler [ targetx ] |
Status | Original: Open [ 1 ] | New: In Progress [ 3 ] |
Status | Original: In Progress [ 3 ] | New: In Review [ 10005 ] |
Remote Link | New: This issue links to "https://github.com/jenkinsci/jenkins/pull/6965 (Web Link)" [ 28039 ] |
Released As | New: 2.362 | |
Resolution | New: Fixed [ 1 ] | |
Status | Original: In Review [ 10005 ] | New: Closed [ 6 ] |
Released As | Original: 2.362 | New: 2.363 |