• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: changes-since-last-success-plugin
• Labels:

  • CSP

[JENKINS-74231] [changes-since-last-success] Extract inline event handlers in WEB-INF/classes/com/cloudbees/jenkins/plugins/changelog/ChangelogAction/index.jelly

Basil Crow created issue - 2024-10-23 23:37

Basil Crow made changes - 2024-10-24 00:47

Assignee

Original: Tony Noble [ stealthdj ]

Basil Crow made changes - 2024-10-24 15:03

Description

Original: h4. Problems {noformat} == Inline Event Handler Line: 32 ---- <input type="date" value="${it.build.timestampString2}"                            onchange="document.getElementById('since').href='since/'+this.value"/> ---- == Inline Event Handler Line: 37 ---- <input type="number" min="${it.build.parent.firstBuild.number}" max="${it.build.parent.lastBuild.number}" value="${it.build.number}"                            onchange="document.getElementById('buildNumber').href='buildNumber/'+this.value"/> ---- == Inline Event Handler Line: 32 ---- <input type="date" value="${it.build.timestampString2}"                            onchange="document.getElementById('since').href='since/'+this.value"/> ---- == Inline Event Handler Line: 37 ---- <input type="number" min="${it.build.parent.firstBuild.number}" max="${it.build.parent.lastBuild.number}" value="${it.build.number}"                            onchange="document.getElementById('buildNumber').href='buildNumber/'+this.value"/> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]

New: h4. Problems {noformat} == Inline Event Handler Line: 32 ---- <input type="date" value="${it.build.timestampString2}"                            onchange="document.getElementById('since').href='since/'+this.value"/> ---- == Inline Event Handler Line: 37 ---- <input type="number" min="${it.build.parent.firstBuild.number}" max="${it.build.parent.lastBuild.number}" value="${it.build.number}"                            onchange="document.getElementById('buildNumber').href='buildNumber/'+this.value"/> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]