Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-74559

[xpath-config-viewer] Extract inline event handlers in WEB-INF/classes/org/jenkinsci/plugins/viewer/XPathConfig/show.jelly

      Problems

      == Inline Event Handler
      Line: 33
      ----
      <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
      ----
      
      == Inline Event Handler
      Line: 34
      ----
      <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
      ----
      
      == Inline Event Handler
      Line: 36
      ----
      <a href="delConfig?id=${it.id}" onclick="if(confirm('delete config from view?')) return true; else return false;">
      ----
      

      Solution

      https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers

          [JENKINS-74559] [xpath-config-viewer] Extract inline event handlers in WEB-INF/classes/org/jenkinsci/plugins/viewer/XPathConfig/show.jelly

          Basil Crow created issue -
          Basil Crow made changes -
          Description Original: h4. Problems

          {noformat}
          == Inline Event Handler
          Line: 33
          ----
          <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
          ----

          == Inline Event Handler
          Line: 34
          ----
          <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
          ----

          == Inline Event Handler
          Line: 36
          ----
          <a href="delConfig?id=${it.id}" onclick="if(confirm('delete config from view?')) return true; else return false;">
          ----

          == Inline Event Handler
          Line: 33
          ----
          <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
          ----

          == Inline Event Handler
          Line: 34
          ----
          <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
          ----

          == Inline Event Handler
          Line: 36
          ----
          <a href="delConfig?id=${it.id}" onclick="if(confirm('delete config from view?')) return true; else return false;">
          ----
          {noformat}

          h4. Solution

          [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]
          New: h4. Problems

          {noformat}
          == Inline Event Handler
          Line: 33
          ----
          <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
          ----

          == Inline Event Handler
          Line: 34
          ----
          <a href="#" onclick="javascript:$$$$('.${classId}').each(Element.toggle);$$$$('.${classId}a').each(Element.toggle)">
          ----

          == Inline Event Handler
          Line: 36
          ----
          <a href="delConfig?id=${it.id}" onclick="if(confirm('delete config from view?')) return true; else return false;">
          ----
          {noformat}

          h4. Solution

          [https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers]

            Unassigned Unassigned
            basil Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: