-
Task
-
Resolution: Unresolved
-
Minor
Note
While testing this plugin, evaluate whether the third-party libraries in src/main/webapp are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.
Problems
== Legacy checkUrl
Line: 25
----
checkUrl="'${rootURL}/builder/ClifBuilder/checkTestPlanFile?value='+escape(this.value)"
----
== Legacy checkUrl
Line: 33
----
checkUrl="'${rootURL}/builder/ClifBuilder/checkReportDir?value='+escape(this.value)"
----
Solution
https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation
[JENKINS-74594] [clif-performance-testing] Migrate legacy checkUrl attributes in org/ow2/clif/jenkins/ClifBuilder/config.jelly
Basil Crow
created issue -
Basil Crow
made changes -
| Assignee | Original: Bruno Dillenseger [ dillense ] |
| Assignee | New: Bruno Dillenseger [ dillense ] |
Basil Crow
made changes -
| Description |
Original:
h4. Problems {noformat} == Legacy checkUrl Line: 25 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkTestPlanFile?value='+escape(this.value)" ---- == Legacy checkUrl Line: 33 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkReportDir?value='+escape(this.value)" ---- == Legacy checkUrl Line: 25 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkTestPlanFile?value='+escape(this.value)" ---- == Legacy checkUrl Line: 33 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkReportDir?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation] |
New:
h4. Problems {noformat} == Legacy checkUrl Line: 25 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkTestPlanFile?value='+escape(this.value)" ---- == Legacy checkUrl Line: 33 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkReportDir?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation] |
Basil Crow
made changes -
| Description |
Original:
h4. Problems {noformat} == Legacy checkUrl Line: 25 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkTestPlanFile?value='+escape(this.value)" ---- == Legacy checkUrl Line: 33 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkReportDir?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation] |
New:
h1. Note
*While testing this plugin, evaluate whether the third-party libraries in {{src/main/webapp}} are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.* h4. Problems {noformat} == Legacy checkUrl Line: 25 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkTestPlanFile?value='+escape(this.value)" ---- == Legacy checkUrl Line: 33 ---- checkUrl="'${rootURL}/builder/ClifBuilder/checkReportDir?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation] |