• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: cisco-spark-notifier-plugin
• Labels:

  • CSP

[JENKINS-74387] [cisco-spark-notifier] Migrate legacy checkUrl attributes in WEB-INF/classes/com/jenkins/plugins/sparknotify/workflow/SparkSendStep/config.jelly

Basil Crow created issue - 2024-10-23 23:53

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Taylor Patton [ taylorp36 ]

Basil Crow made changes - 2024-10-24 15:17

Description

Original: h4. Problems {noformat} == Legacy checkUrl Line: 5 ---- checkUrl="'${rootURL}/descriptor/SparkSendStep/messageCheck?message='+escape(this.value)" ---- == Legacy checkUrl Line: 21 ---- checkUrl="'${rootURL}/descriptor/SparkSendStep/spaceIdCheck?spaceId='+escape(this.value)" ---- == Legacy checkUrl Line: 5 ---- checkUrl="'${rootURL}/descriptor/SparkSendStep/messageCheck?message='+escape(this.value)" ---- == Legacy checkUrl Line: 21 ---- checkUrl="'${rootURL}/descriptor/SparkSendStep/spaceIdCheck?spaceId='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]

New: h4. Problems {noformat} == Legacy checkUrl Line: 5 ---- checkUrl="'${rootURL}/descriptor/SparkSendStep/messageCheck?message='+escape(this.value)" ---- == Legacy checkUrl Line: 21 ---- checkUrl="'${rootURL}/descriptor/SparkSendStep/spaceIdCheck?spaceId='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]