• Icon: Task Task
    • Resolution: Fixed
    • Icon: Minor Minor
    • core
    • 2.363

      Core uses handlebars (*.hbs files) 3.0.8. Updating to 4.x requires a few tweaks to existing handlebars logic in core, to address security standards properly:

      16:24:10  [INFO]       Handlebars: Access has been denied to resolve the property "installWizard_welcomePanel_title" because it is not an "own property" of its parent.
      16:24:10  [INFO]       You can add a runtime option to disable the check or this warning:
      16:24:10  [INFO]       See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
      

      There are a few more locations in core that need a few tweaks, additional information about this can be found here: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details

      While updating handlebars, handlebars-loader should be updated too.

          [JENKINS-68926] Update handlebars from 3.x to 4.x

          Alexander Brandes created issue -
          Alexander Brandes made changes -
          Description Original: Core uses handlebars (*.hbs files) 3.0.8. Updating to 4.x requires a few tweaks to existing handlebars logic in core, to address security standards properly:
          {code:java}
          16:24:10 [INFO] Handlebars: Access has been denied to resolve the property "installWizard_welcomePanel_title" because it is not an "own property" of its parent.
          16:24:10 [INFO] You can add a runtime option to disable the check or this warning:
          16:24:10 [INFO] See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
          {code}
          There are a few more locations in core that need a few tweaks, additional information about this can be found here: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
          New: Core uses handlebars (*.hbs files) 3.0.8. Updating to 4.x requires a few tweaks to existing handlebars logic in core, to address security standards properly:
          {code:java}
          16:24:10 [INFO] Handlebars: Access has been denied to resolve the property "installWizard_welcomePanel_title" because it is not an "own property" of its parent.
          16:24:10 [INFO] You can add a runtime option to disable the check or this warning:
          16:24:10 [INFO] See https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details
          {code}
          There are a few more locations in core that need a few tweaks, additional information about this can be found here: https://handlebarsjs.com/api-reference/runtime-options.html#options-to-control-prototype-access for details

          While updating handlebars, {{handlebars-loader}} should be updated too.
          Thorsten Scherler made changes -
          Assignee New: Thorsten Scherler [ targetx ]
          Thorsten Scherler made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Alexander Brandes made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Alexander Brandes made changes -
          Remote Link New: This issue links to "https://github.com/jenkinsci/jenkins/pull/6965 (Web Link)" [ 28039 ]
          Alexander Brandes made changes -
          Released As New: 2.362
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Closed [ 6 ]
          Alexander Brandes made changes -
          Released As Original: 2.362 New: 2.363

            targetx Thorsten Scherler
            notmyfault Alexander Brandes
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: