• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: marathon-plugin
• Labels:

  • CSP

[JENKINS-74452] [marathon] Migrate legacy checkUrl attributes in com/mesosphere/velocity/marathon/MarathonRecorder/config.jelly

Basil Crow created issue - 2024-10-24 00:00

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Colin [ colinmsphere ]

Basil Crow made changes - 2024-10-24 15:23

Description

Original: h4. Problems {noformat} == Legacy checkUrl Line: 4 ---- checkUrl="'descriptorByName/com.mesosphere.velocity.marathon.MarathonRecorder/checkUrl?value='+encode(this.value)" ---- == Legacy checkUrl Line: 39 ---- checkUrl="'descriptorByName/com.mesosphere.velocity.marathon.MarathonRecorder/checkUri?value='+encode(this.value)" ---- == Legacy checkUrl Line: 4 ---- checkUrl="'descriptorByName/com.mesosphere.velocity.marathon.MarathonRecorder/checkUrl?value='+encode(this.value)" ---- == Legacy checkUrl Line: 39 ---- checkUrl="'descriptorByName/com.mesosphere.velocity.marathon.MarathonRecorder/checkUri?value='+encode(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]

New: h4. Problems {noformat} == Legacy checkUrl Line: 4 ---- checkUrl="'descriptorByName/com.mesosphere.velocity.marathon.MarathonRecorder/checkUrl?value='+encode(this.value)" ---- == Legacy checkUrl Line: 39 ---- checkUrl="'descriptorByName/com.mesosphere.velocity.marathon.MarathonRecorder/checkUri?value='+encode(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]