-
Task
-
Resolution: Unresolved
-
Minor
Note
While testing this plugin, evaluate whether the third-party libraries in src/main/webapp are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.
Problem
== Inline Script Block
Line: 8
----
<script>
Behaviour.specify("INPUT[name='com-xebialabs-deployit-ci-DeployitNotifier']", 'ivy-fix', 200, function (e) {
e.removeAttribute("name");
});
</script>
----
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
[JENKINS-74317] [deployit-plugin] Extract inline script block in WEB-INF/classes/lib/xld/publisherFix.jelly
Basil Crow
created issue -
Basil Crow
made changes -
| Description |
Original:
h4. Problems {noformat} == Inline Script Block Line: 8 ---- <script> Behaviour.specify("INPUT[name='com-xebialabs-deployit-ci-DeployitNotifier']", 'ivy-fix', 200, function (e) { e.removeAttribute("name"); }); </script> ---- == Inline Script Block Line: 8 ---- <script> Behaviour.specify("INPUT[name='com-xebialabs-deployit-ci-DeployitNotifier']", 'ivy-fix', 200, function (e) { e.removeAttribute("name"); }); </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
New:
h4. Problem {noformat} == Inline Script Block Line: 8 ---- <script> Behaviour.specify("INPUT[name='com-xebialabs-deployit-ci-DeployitNotifier']", 'ivy-fix', 200, function (e) { e.removeAttribute("name"); }); </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
| Summary | Original: [deployit-plugin] Extract inline script blocks in WEB-INF/classes/lib/xld/publisherFix.jelly | New: [deployit-plugin] Extract inline script block in WEB-INF/classes/lib/xld/publisherFix.jelly |
Basil Crow
made changes -
| Description |
Original:
h4. Problem {noformat} == Inline Script Block Line: 8 ---- <script> Behaviour.specify("INPUT[name='com-xebialabs-deployit-ci-DeployitNotifier']", 'ivy-fix', 200, function (e) { e.removeAttribute("name"); }); </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
New:
h1. Note
*While testing this plugin, evaluate whether the third-party libraries in {{src/main/webapp}} are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.* h4. Problem {noformat} == Inline Script Block Line: 8 ---- <script> Behaviour.specify("INPUT[name='com-xebialabs-deployit-ci-DeployitNotifier']", 'ivy-fix', 200, function (e) { e.removeAttribute("name"); }); </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |