-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Minor
-
Component/s: template-workflows-plugin
Problems
== Inline Script Block
Line: 32
----
<script>
function setTemplateInstanceName(instanceName) {
var foo = <st:bind value="${it}"/>
foo.setTemplateInstanceName(instanceName, function(t) {
var res = t.responseObject();
if (res.result == true) {
window.location.href = '${rootURL}/${it.url}configure';
}
})
}
function deleteInstance(instanceName) {
var is_chrome = navigator.userAgent.toLowerCase().indexOf('chrome') > -1;
if (!is_chrome) {
var msg = "Are you sure you want to delete " + instanceName + "?";
var agree=confirm(msg);
if (!agree) {
return false;
}
}
var foo = <st:bind value="${it}"/>
foo.deleteInstance(instanceName, function(t) {
var res = t.responseObject();
if (res.result == true) {
notificationBar.show(instanceName + ' Deleted', notificationBar.INFO);
setTimeout("notificationBar.hide();window.location.href = '${rootURL}/${it.url}configure'",3000);
} else {
notificationBar.show(res.msg, notificationBar.ERROR);
setTimeout("notificationBar.hide();",3000);
return false;
}
})
}
function executeInstance(instanceName) {
var foo = <st:bind value="${it}"/>
foo.executeWorkflow(instanceName, function(t) {
var res = t.responseObject();
if (res.result == true) {
notificationBar.show(res.msg, notificationBar.OK);
setTimeout("notificationBar.hide();",3000);
} else {
notificationBar.show(res.msg, notificationBar.ERROR);
setTimeout("notificationBar.hide();",3000);
return false;
}
})
}
</script>
----
== Inline Event Handler
Line: 10
----
<a style="padding-left:5px;"
onclick="setTemplateInstanceName('${instance.instanceName}'); return false;"
href="${rootURL}/${it.url}configure">
----
== Inline Event Handler
Line: 17
----
<input type="image" title="Delete workflow: '${instance.instanceName}' (jobs that were created by this workflow will be deleted)"
onclick="deleteInstance('${instance.instanceName}'); return false;"
size="16" src="${rootURL}/images/16x16/edit-delete.png"/>
----
== Inline Event Handler
Line: 23
----
<input type="image" title="Execute workflow: '${instance.instanceName}'"
onclick="executeInstance('${instance.instanceName}'); return false;"
size="16" src="${rootURL}/images/16x16/clock.gif"/>
----
Solutions
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers