• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: jms-messaging-plugin
• Labels:

  • CSP

[JENKINS-74472] [jms-messaging] Extract inline event handler and migrate legacy checkUrl attribute in com/redhat/jenkins/plugins/ci/pipeline/CIMessageSubscriberStep/config.jelly

Basil Crow created issue - 2024-10-24 00:02

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Scott Hebert [ scoheb ]

Basil Crow made changes - 2024-10-24 15:24

Description	Original: h4. Problems {noformat} == Inline Event Handler Line: 28 ---- <f:select onchange="javascript: onProviderChange(this, 'subscriber');"/> ---- == Legacy checkUrl Line: 58 ---- checkUrl="'descriptorByName/com.redhat.jenkins.plugins.ci.CIBuildTrigger/checkField?value='+escape(this.value)" ---- == Inline Event Handler Line: 28 ---- <f:select onchange="javascript: onProviderChange(this, 'subscriber');"/> ---- == Legacy checkUrl Line: 58 ---- checkUrl="'descriptorByName/com.redhat.jenkins.plugins.ci.CIBuildTrigger/checkField?value='+escape(this.value)" ---- {noformat} h4. Solutions [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers] [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]	New: h4. Problems {noformat} == Legacy checkUrl Line: 58 ---- checkUrl="'descriptorByName/com.redhat.jenkins.plugins.ci.CIBuildTrigger/checkField?value='+escape(this.value)" ---- == Inline Event Handler Line: 28 ---- <f:select onchange="javascript: onProviderChange(this, 'subscriber');"/> ---- {noformat} h4. Solutions [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers] [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]
Summary	Original: [jms-messaging] Extract inline event handlers and migrate legacy checkUrl attributes in com/redhat/jenkins/plugins/ci/pipeline/CIMessageSubscriberStep/config.jelly	New: [jms-messaging] Extract inline event handler and migrate legacy checkUrl attribute in com/redhat/jenkins/plugins/ci/pipeline/CIMessageSubscriberStep/config.jelly