[bugzilla] Extract inline event handler and migrate legacy checkUrl attributes in WEB-INF/classes/hudson/plugins/bugzilla/BugzillaProjectProperty/global.jelly

XMLWordPrintable

    • Type: Task
    • Resolution: Unresolved
    • Priority: Minor
    • Component/s: bugzilla-plugin

      Problems

      == Legacy checkUrl
      Line: 5
      ----
      checkUrl="'${rootURL}/jobProperty/BugzillaProjectProperty/regexCheck?value='+escape(this.value)"
      ----
      
      == Legacy checkUrl
      Line: 9
      ----
      checkUrl="'${rootURL}/jobProperty/BugzillaProjectProperty/urlCheck?value='+escape(this.value)"
      ----
      
      == Legacy checkUrl
      Line: 19
      ----
      checkUrl="'${rootURL}/jobProperty/BugzillaProjectProperty/loginCheck?url='+escape(Form.findMatchingInput(this,'bugzilla.base').value)+'&user='+escape(this.value)+'&pass='+escape(Form.findMatchingInput(this,'bugzilla.password').value)"
      ----
      
      == Inline Event Handler
      Line: 23
      ----
      <input class="setting-input" name="bugzilla.password"
      		               type="password" value="${descriptor.password}"
      		               onchange="Form.findMatchingInput(this,'bugzilla.username').onchange()"/>
      ----
      

      Solutions

      https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers
      https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation

            Assignee:
            Unassigned
            Reporter:
            Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: