-
Task
-
Resolution: Unresolved
-
Minor
Problem
== Inline Script Block Line: 5 ---- <script type="text/javascript"> var _paq = _paq || []; _paq.push(["setDomains", ["*.localhost"]]); _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="${it.protocolString}${it.piwikServer}${it.piwikPath}"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', ${it.siteId}]); <j:if test="${it.additionnalDownloadExtensions!=null}"> _paq.push(['setDownloadExtensions', "${it.additionnalDownloadExtensions}"]); </j:if> var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> ----
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
[JENKINS-74482] [piwikanalytics] Extract inline script block in hudson/plugins/piwik/PiwikAnalyticsPageDecorator/footer.jelly
Description |
Original:
h4. Problems {noformat} == Inline Script Block Line: 5 ---- <script type="text/javascript"> var _paq = _paq || []; _paq.push(["setDomains", ["*.localhost"]]); _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="${it.protocolString}${it.piwikServer}${it.piwikPath}"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', ${it.siteId}]); <j:if test="${it.additionnalDownloadExtensions!=null}"> _paq.push(['setDownloadExtensions', "${it.additionnalDownloadExtensions}"]); </j:if> var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> ---- == Inline Script Block Line: 5 ---- <script type="text/javascript"> var _paq = _paq || []; _paq.push(["setDomains", ["*.localhost"]]); _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="${it.protocolString}${it.piwikServer}${it.piwikPath}"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', ${it.siteId}]); <j:if test="${it.additionnalDownloadExtensions!=null}"> _paq.push(['setDownloadExtensions', "${it.additionnalDownloadExtensions}"]); </j:if> var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
New:
h4. Problem {noformat} == Inline Script Block Line: 5 ---- <script type="text/javascript"> var _paq = _paq || []; _paq.push(["setDomains", ["*.localhost"]]); _paq.push(['trackPageView']); _paq.push(['enableLinkTracking']); (function() { var u="${it.protocolString}${it.piwikServer}${it.piwikPath}"; _paq.push(['setTrackerUrl', u+'piwik.php']); _paq.push(['setSiteId', ${it.siteId}]); <j:if test="${it.additionnalDownloadExtensions!=null}"> _paq.push(['setDownloadExtensions', "${it.additionnalDownloadExtensions}"]); </j:if> var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0]; g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s); })(); </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
Summary | Original: [piwikanalytics] Extract inline script blocks in hudson/plugins/piwik/PiwikAnalyticsPageDecorator/footer.jelly | New: [piwikanalytics] Extract inline script block in hudson/plugins/piwik/PiwikAnalyticsPageDecorator/footer.jelly |