- 
    
Task
 - 
    Resolution: Unresolved
 - 
    
Minor
 
Problems
== Inline Script Block
Line: 32
----
<script>
    function setTemplateInstanceName(instanceName) {
    	var foo = <st:bind value="${it}"/>
    	foo.setTemplateInstanceName(instanceName, function(t) {
    		var res = t.responseObject();
    		if (res.result == true) {
    			 window.location.href = '${rootURL}/${it.url}configure';
    		}
    	})
    }
     function deleteInstance(instanceName) {
    	var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1;
        if (!is_chrome) {
	    	var msg = "Are you sure you want to delete " + instanceName + "?";
	        var agree=confirm(msg);
			if (!agree) {
				return false;
			}
        }
    	var foo = <st:bind value="${it}"/>
    	foo.deleteInstance(instanceName, function(t) {
    		var res = t.responseObject();
    		if (res.result == true) {
    			notificationBar.show(instanceName + ' Deleted', notificationBar.INFO);
    	    	setTimeout("notificationBar.hide();window.location.href = '${rootURL}/${it.url}configure'",3000);
    		} else {
    			notificationBar.show(res.msg, notificationBar.ERROR);
				setTimeout("notificationBar.hide();",3000);
				return false;
    		}
    	})
    }
     function executeInstance(instanceName) {
     	var foo = <st:bind value="${it}"/>
     	foo.executeWorkflow(instanceName, function(t) {
     		var res = t.responseObject();
     		if (res.result == true) {
     			notificationBar.show(res.msg, notificationBar.OK);
 				setTimeout("notificationBar.hide();",3000);
     		} else {
     			notificationBar.show(res.msg, notificationBar.ERROR);
 				setTimeout("notificationBar.hide();",3000);
 				return false;
     		}
     	})
     }
  </script>
----
== Inline Event Handler
Line: 10
----
<a style="padding-left:5px;"
          onclick="setTemplateInstanceName('${instance.instanceName}'); return false;"
          href="${rootURL}/${it.url}configure">
----
== Inline Event Handler
Line: 17
----
<input type="image" title="Delete workflow: '${instance.instanceName}' (jobs that were created by this workflow will be deleted)"
                onclick="deleteInstance('${instance.instanceName}'); return false;"
				size="16" src="${rootURL}/images/16x16/edit-delete.png"/>
----
== Inline Event Handler
Line: 23
----
<input type="image" title="Execute workflow: '${instance.instanceName}'"
               onclick="executeInstance('${instance.instanceName}'); return false;"
			   size="16" src="${rootURL}/images/16x16/clock.gif"/>
----
Solutions
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers