Loading...

This issue is archived. You can view it, but you can't modify it. Learn more

XML

Word

Printable

Type: Improvement
Resolution: Fixed
Priority: Minor
Component/s: core
Labels:
- CSP
- issue-exported-to-github

Epic Link:
CSP compatibility for Jenkins core
Released As:
2.480

eval call in textarea.js

Culprit

https://github.com/jenkinsci/jenkins/blob/19edf146946dd0e1b8ec5b909d002ffca53e8209/core/src/main/resources/lib/form/textarea/textarea.js#L6

Proposal

https://www.jenkins.io/doc/developer/security/csp/#eval-calls

Testing

https://www.jenkins.io/doc/developer/security/csp/#testing

links to

jenkinsci/jenkins/pull/6867

jenkinsci/jenkins/pull/8351

Assignee:: Daniel Beck
Reporter:: Yaroslav Afenkin

Created:: 2023-06-22 10:30
Updated:: Yesterday 14:31
Resolved:: 2024-10-08 15:54
Archived:: Yesterday 14:31