• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: phabricator-plugin
• Labels:

  • CSP

[JENKINS-74333] [phabricator-plugin] Extract inline event handler in WEB-INF/classes/com/uber/jenkins/phabricator/PhabricatorPostbuildAction/badge.jelly

Basil Crow created issue - 2024-10-23 23:47

Basil Crow made changes - 2024-10-24 15:12

Description	Original: h4. Problems {noformat} == Inline Event Handler Line: 4 ---- <img src="${rootURL}${it.iconPath}" width="16" height="16" alt="${it.text}" title="${it.text}" onclick="javascript:alert('${it.text}')" /> ---- == Inline Event Handler Line: 4 ---- <img src="${rootURL}${it.iconPath}" width="16" height="16" alt="${it.text}" title="${it.text}" onclick="javascript:alert('${it.text}')" /> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]	New: h4. Problem {noformat} == Inline Event Handler Line: 4 ---- <img src="${rootURL}${it.iconPath}" width="16" height="16" alt="${it.text}" title="${it.text}" onclick="javascript:alert('${it.text}')" /> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]
Summary	Original: [phabricator-plugin] Extract inline event handlers in WEB-INF/classes/com/uber/jenkins/phabricator/PhabricatorPostbuildAction/badge.jelly	New: [phabricator-plugin] Extract inline event handler in WEB-INF/classes/com/uber/jenkins/phabricator/PhabricatorPostbuildAction/badge.jelly