• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: diagnostics-plugin
• Labels:

  • CSP

[JENKINS-74531] [diagnostics] Extract inline script block and event handler in org/jenkinsci/plugins/diagnostics/DiagnosticsAction/ajaxReport.jelly

Basil Crow created issue - 2024-10-24 00:08

Basil Crow made changes - 2024-10-24 00:48

Assignee

Original: Adrien Lecharpentier [ alecharp ]

Basil Crow made changes - 2024-10-24 15:30

Description	Original: h4. Problems {noformat} == Inline Event Handler Line: 70 ---- <l:icon                                  title="${%Cancel}"                                  alt="${%Cancel}"                                  tooltip="${%Cancel}"                                  onclick="return cancelSession(this)"                                  src="${rootURL}/plugin/diagnostics/images/32x32/stop.png"/> ---- == Inline Script Block Line: 149 ---- <script defer="defer">             refreshPart('report-area',"./ajaxReport?sessionId=${sessionId}");           </script> ---- == Inline Event Handler Line: 70 ---- <l:icon                                  title="${%Cancel}"                                  alt="${%Cancel}"                                  tooltip="${%Cancel}"                                  onclick="return cancelSession(this)"                                  src="${rootURL}/plugin/diagnostics/images/32x32/stop.png"/> ---- == Inline Script Block Line: 149 ---- <script defer="defer">             refreshPart('report-area',"./ajaxReport?sessionId=${sessionId}");           </script> ---- {noformat} h4. Solutions [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]	New: h4. Problems {noformat} == Inline Script Block Line: 149 ---- <script defer="defer">             refreshPart('report-area',"./ajaxReport?sessionId=${sessionId}");           </script> ---- == Inline Event Handler Line: 70 ---- <l:icon                                  title="${%Cancel}"                                  alt="${%Cancel}"                                  tooltip="${%Cancel}"                                  onclick="return cancelSession(this)"                                  src="${rootURL}/plugin/diagnostics/images/32x32/stop.png"/> ---- {noformat} h4. Solutions [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]
Summary	Original: [diagnostics] Extract inline script blocks and event handlers in org/jenkinsci/plugins/diagnostics/DiagnosticsAction/ajaxReport.jelly	New: [diagnostics] Extract inline script block and event handler in org/jenkinsci/plugins/diagnostics/DiagnosticsAction/ajaxReport.jelly