-
Task
-
Resolution: Unresolved
-
Minor
Note
While testing this plugin, evaluate whether the third-party libraries in src/main/webapp are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.
Problems
== Inline Script Block
Line: 3
----
<script type="text/javascript">
<!-- Function who create accordion -->
function create_accordion(accordionName){
jQuery( function()
{
var cookieName = accordionName;
<!-- In default we close all accordion, we fix index to 10 -->
var var_active = 10;
var cookies_id = jQuery.cookies.get(cookieName);
if (cookies_id == cookieName){
var_active = 0;
}
jQuery(accordionName).accordion( {
active: var_active,
collapsible: true,
animated : false,
autoHeight : false,
change: function( e, ui ) {
<!-- If accordion is not open (10), we create cookie to save state -->
if (cookies_id != cookieName){
jQuery.cookies.set( cookieName, cookieName);
}else{
jQuery.cookies.del(cookieName);
}
}
} );
} );
}
</script>
----
== Inline Script Block
Line: 47
----
<script type="text/javascript">
create_accordion('#accordion${projectname}'+${buildnumber}+${indexA}+${indexB});
</script>
----
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks