• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: parasoft-findings-plugin
• Labels:

  • CSP

[JENKINS-74340] [parasoft-findings] Extract inline script block in com/parasoft/findings/jenkins/coverage/api/metrics/steps/CoverageViewModel/index.jelly

Basil Crow created issue - 2024-10-23 23:48

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Jacek Marzec [ jacekmarzecparasoft ]

Basil Crow made changes - 2024-10-24 15:13

Description	Original: h4. Problems {noformat} == Inline Script Block Line: 90 ---- <script>     const viewProxy =<st:bind value="${it}"/>;     const coverageChartGenerator = new CoverageChartGenerator(jQuery3);     viewProxy.getJenkinsColorIDs(function (colors) {         const jenkinsColors = getJenkinsColors(colors.responseObject());         const colorJson = JSON.stringify(Object.fromEntries(jenkinsColors));         viewProxy.setJenkinsColors(colorJson, function(t) {});         coverageChartGenerator.populateDetailsCharts(jenkinsColors, '${%setup.text}');     });   </script> ---- == Inline Script Block Line: 90 ---- <script>     const viewProxy =<st:bind value="${it}"/>;     const coverageChartGenerator = new CoverageChartGenerator(jQuery3);     viewProxy.getJenkinsColorIDs(function (colors) {         const jenkinsColors = getJenkinsColors(colors.responseObject());         const colorJson = JSON.stringify(Object.fromEntries(jenkinsColors));         viewProxy.setJenkinsColors(colorJson, function(t) {});         coverageChartGenerator.populateDetailsCharts(jenkinsColors, '${%setup.text}');     });   </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks]	New: h4. Problem {noformat} == Inline Script Block Line: 90 ---- <script>     const viewProxy =<st:bind value="${it}"/>;     const coverageChartGenerator = new CoverageChartGenerator(jQuery3);     viewProxy.getJenkinsColorIDs(function (colors) {         const jenkinsColors = getJenkinsColors(colors.responseObject());         const colorJson = JSON.stringify(Object.fromEntries(jenkinsColors));         viewProxy.setJenkinsColors(colorJson, function(t) {});         coverageChartGenerator.populateDetailsCharts(jenkinsColors, '${%setup.text}');     });   </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks]
Summary	Original: [parasoft-findings] Extract inline script blocks in com/parasoft/findings/jenkins/coverage/api/metrics/steps/CoverageViewModel/index.jelly	New: [parasoft-findings] Extract inline script block in com/parasoft/findings/jenkins/coverage/api/metrics/steps/CoverageViewModel/index.jelly