• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: contrast-continuous-application-security-plugin
• Labels:

  • CSP

[JENKINS-74439] [contrast-continuous-application-security] Migrate legacy checkUrl attributes in com/aspectsecurity/contrast/contrastjenkins/ContrastPluginConfig/global.jelly

Basil Crow created issue - 2024-10-23 23:58

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Max Gelman [ mgelman08 ]

Basil Crow made changes - 2024-10-24 15:22

Description

Original: h4. Problems {noformat} == Legacy checkUrl Line: 8 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkProfileName?value='+escape(this.value)" ---- == Legacy checkUrl Line: 13 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkUsername?value='+escape(this.value)" ---- == Legacy checkUrl Line: 16 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkApiKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 19 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkServiceKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 22 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkTeamServerUrl?value='+escape(this.value)" ---- == Legacy checkUrl Line: 25 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkOrgUuid?value='+escape(this.value)" ---- == Legacy checkUrl Line: 8 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkProfileName?value='+escape(this.value)" ---- == Legacy checkUrl Line: 13 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkUsername?value='+escape(this.value)" ---- == Legacy checkUrl Line: 16 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkApiKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 19 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkServiceKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 22 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkTeamServerUrl?value='+escape(this.value)" ---- == Legacy checkUrl Line: 25 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkOrgUuid?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]

New: h4. Problems {noformat} == Legacy checkUrl Line: 8 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkProfileName?value='+escape(this.value)" ---- == Legacy checkUrl Line: 13 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkUsername?value='+escape(this.value)" ---- == Legacy checkUrl Line: 16 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkApiKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 19 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkServiceKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 22 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkTeamServerUrl?value='+escape(this.value)" ---- == Legacy checkUrl Line: 25 ---- checkUrl="'descriptorByName/ContrastPluginConfig/checkOrgUuid?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]