-
Task
-
Resolution: Unresolved
-
Minor
Note
While testing this plugin, evaluate whether the third-party libraries in src/main/webapp/yui are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.
Problem
== Inline Script Block
Line: 8
----
<script type="text/javascript">
var myTabs = new YAHOO.widget.TabView("statistics");
YAHOO.plugin.Dispatcher.delegate (new YAHOO.widget.Tab({
label: '${%Files}',
dataSrc: 'files',
cacheData: true,
active: false
}), myTabs);
<j:if test="${it.report.moduleCount > 1}">
YAHOO.plugin.Dispatcher.delegate (new YAHOO.widget.Tab({
label: '${%Modules}',
dataSrc: 'modules',
cacheData: true,
active: false
}), myTabs);
</j:if>
<j:if test="${it.report.folderCount > 1}">
YAHOO.plugin.Dispatcher.delegate (new YAHOO.widget.Tab({
label: '${%Folders}',
dataSrc: 'folders',
cacheData: true,
active: false
}), myTabs);
</j:if>
<j:if test="${it.report.languageCount > 1}">
YAHOO.plugin.Dispatcher.delegate (new YAHOO.widget.Tab({
label: '${%Languages}',
dataSrc: 'languages',
cacheData: true,
active: false
}), myTabs);
</j:if>
myTabs.set('activeIndex', 0);
</script>
----
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
