Loading...

This issue is archived. You can view it, but you can't modify it. Learn more

XML

Word

Printable

Type: Improvement
Resolution: Cannot Reproduce
Priority: Minor
Component/s: core
Labels:
- CSP
- issue-exported-to-github

Epic Link:
CSP compatibility for Jenkins core

eval calls in datasource-debug/min.js

Culprits

https://github.com/jenkinsci/jenkins/blob/7301c641a87e517ed0acfe989264b50516b611c1/war/src/main/webapp/scripts/yui/datasource/datasource-debug.js#L1088

https://github.com/jenkinsci/jenkins/blob/7301c641a87e517ed0acfe989264b50516b611c1/war/src/main/webapp/scripts/yui/datasource/datasource-debug.js#L1135

https://github.com/jenkinsci/jenkins/blob/7301c641a87e517ed0acfe989264b50516b611c1/war/src/main/webapp/scripts/yui/datasource/datasource-min.js

Proposal

https://www.jenkins.io/doc/developer/security/csp/#eval-calls

Testing

https://www.jenkins.io/doc/developer/security/csp/#testing

Assignee:: Unassigned
Reporter:: Yaroslav Afenkin

Created:: 2023-06-22 14:10
Updated:: 2025-11-25 14:31
Resolved:: 2025-08-13 07:55
Archived:: 2025-11-25 14:31