• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: chatwork-plugin
• Labels:

  • CSP

[JENKINS-74414] [chatwork] Extract inline script block and event handler in com/vexus2/jenkins/chatwork/jenkinschatworkplugin/ChatworkPublisher/global.jelly

Basil Crow created issue - 2024-10-23 23:56

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Hikaru Tooyama [ vexus2 ]

Basil Crow made changes - 2024-10-24 15:19

Description	Original: h4. Problems {noformat} == Inline Event Handler Line: 45 ---- <input type="button" value="clear" onclick="ChatworkPublisher.clearCache();"/> ---- == Inline Script Block Line: 47 ---- <script>       var ChatworkPublisher = {         clearCache: function(){           new Ajax.Request("${rootURL}/descriptor/com.vexus2.jenkins.chatwork.jenkinschatworkplugin.ChatworkPublisher/clearCache", {             onSuccess: function(rsp) {               alert("Clear cache done");             }           });         }       };     </script> ---- == Inline Event Handler Line: 45 ---- <input type="button" value="clear" onclick="ChatworkPublisher.clearCache();"/> ---- == Inline Script Block Line: 47 ---- <script>       var ChatworkPublisher = {         clearCache: function(){           new Ajax.Request("${rootURL}/descriptor/com.vexus2.jenkins.chatwork.jenkinschatworkplugin.ChatworkPublisher/clearCache", {             onSuccess: function(rsp) {               alert("Clear cache done");             }           });         }       };     </script> ---- {noformat} h4. Solutions [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]	New: h4. Problems {noformat} == Inline Script Block Line: 47 ---- <script>       var ChatworkPublisher = {         clearCache: function(){           new Ajax.Request("${rootURL}/descriptor/com.vexus2.jenkins.chatwork.jenkinschatworkplugin.ChatworkPublisher/clearCache", {             onSuccess: function(rsp) {               alert("Clear cache done");             }           });         }       };     </script> ---- == Inline Event Handler Line: 45 ---- <input type="button" value="clear" onclick="ChatworkPublisher.clearCache();"/> ---- {noformat} h4. Solutions [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]
Summary	Original: [chatwork] Extract inline script blocks and event handlers in com/vexus2/jenkins/chatwork/jenkinschatworkplugin/ChatworkPublisher/global.jelly	New: [chatwork] Extract inline script block and event handler in com/vexus2/jenkins/chatwork/jenkinschatworkplugin/ChatworkPublisher/global.jelly