• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: propelo-job-reporter-plugin
• Labels:

  • CSP

[JENKINS-74589] [propelo-job-reporter] Migrate legacy checkUrl attributes in io/jenkins/plugins/propelo/job_reporter/extensions/LevelOpsMgmtLink/index.jelly

Basil Crow created issue - 2024-10-24 00:14

Basil Crow made changes - 2024-10-24 00:49

Assignee

Original: Ivan Leon [ ivan_propelo ]

Basil Crow made changes - 2024-10-24 15:35

Description

Original: h4. Problems {noformat} == Legacy checkUrl Line: 16 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkJenkinsInstanceName?value='+escape(this.value)" ---- == Legacy checkUrl Line: 72 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsApiKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 77 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsStatus?value='+escape(this.value)" ---- == Legacy checkUrl Line: 86 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsPluginPath?value='+escape(this.value)" ---- == Legacy checkUrl Line: 92 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkJenkinsBaseUrl?value='+escape(this.value)" ---- == Legacy checkUrl Line: 16 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkJenkinsInstanceName?value='+escape(this.value)" ---- == Legacy checkUrl Line: 72 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsApiKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 77 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsStatus?value='+escape(this.value)" ---- == Legacy checkUrl Line: 86 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsPluginPath?value='+escape(this.value)" ---- == Legacy checkUrl Line: 92 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkJenkinsBaseUrl?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]

New: h4. Problems {noformat} == Legacy checkUrl Line: 16 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkJenkinsInstanceName?value='+escape(this.value)" ---- == Legacy checkUrl Line: 72 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsApiKey?value='+escape(this.value)" ---- == Legacy checkUrl Line: 77 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsStatus?value='+escape(this.value)" ---- == Legacy checkUrl Line: 86 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkLevelOpsPluginPath?value='+escape(this.value)" ---- == Legacy checkUrl Line: 92 ---- checkUrl="'${rootURL}/plugin/${it.urlName}/checkJenkinsBaseUrl?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]