Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-74480

[bugzilla] Extract inline event handler and migrate legacy checkUrl attributes in WEB-INF/classes/hudson/plugins/bugzilla/BugzillaProjectProperty/global.jelly

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Minor Minor
    • bugzilla-plugin

      Problems

      == Legacy checkUrl
      Line: 5
      ----
      checkUrl="'${rootURL}/jobProperty/BugzillaProjectProperty/regexCheck?value='+escape(this.value)"
      ----
      
      == Legacy checkUrl
      Line: 9
      ----
      checkUrl="'${rootURL}/jobProperty/BugzillaProjectProperty/urlCheck?value='+escape(this.value)"
      ----
      
      == Legacy checkUrl
      Line: 19
      ----
      checkUrl="'${rootURL}/jobProperty/BugzillaProjectProperty/loginCheck?url='+escape(Form.findMatchingInput(this,'bugzilla.base').value)+'&user='+escape(this.value)+'&pass='+escape(Form.findMatchingInput(this,'bugzilla.password').value)"
      ----
      
      == Inline Event Handler
      Line: 23
      ----
      <input class="setting-input" name="bugzilla.password"
      		               type="password" value="${descriptor.password}"
      		               onchange="Form.findMatchingInput(this,'bugzilla.username').onchange()"/>
      ----
      

      Solutions

      https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers
      https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation

            Unassigned Unassigned
            basil Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: