-
Task
-
Resolution: Unresolved
-
Minor
Note
While testing this plugin, evaluate whether the third-party libraries in src/main/webapp are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.
Problems
== Inline Script Block Line: 1844 ---- <script>setupTestRunsTableSort() function openTrend(value) { console.log("url to be open =="+value); window.open(value,'trendGraph'); } function openEd(value) { console.log("url to be open =="+value); window.open(value,'transEd'); } function openDashboard(value) { console.log("dashboard url ==" + value); window.open(value); } function openMetric(value) { console.log("url to be open =="+value); window.open(value); } function openHtmlReport(value) { console.log("url to be open =="+value); window.open(value); } </script> ---- == Inline Event Handler Line: 116 ---- <div class='panel panel-red panel-widget' title="Open WebDashboard" style="cursor:pointer;" onclick="openDashboard('${testReport.getDashboardURL()}')"> ---- == Inline Event Handler Line: 127 ---- <div class='panel panel-red panel-widget' title="Open HTML Report" style="cursor:pointer;" onclick="openHtmlReport('${testReport.getReportLink()}')"> ---- == Inline Event Handler Line: 209 ---- <div class='panel panel-red panel-widget' title="Open WebDashboard" style="cursor:pointer;" onclick="openDashboard('${testReport.getDashboardURL()}')"> ---- == Inline Event Handler Line: 220 ---- <div class='panel panel-red panel-widget' title="Open HTML Report" style="cursor:pointer;" onclick="openHtmlReport('${testReport.getReportLink()}')"> ---- == Inline Event Handler Line: 384 ---- <td align='right' style='background:${suit_metric.currValue.substring( suit_metric.currValue.indexOf("-") + 1, suit_metric.currValue.indexOf(")"))};color:blue;cursor:pointer;' onclick="openEd('${suit_metric.edLink}')"> ---- == Inline Event Handler Line: 706 ---- <i title="Trend Link" onclick="openTrend('${values.trendLink}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 731 ---- <i title="Metric Graph" onclick="openMetric('${metrLink}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 869 ---- <i title="Trend Link" onclick="openTrend('${values.trendLink}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 893 ---- <i title="Metric Graph" onclick="openMetric('${metrLink}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1011 ---- <i title="Trend Link" onclick="openTrend('${scalarGr.trendLink}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1015 ---- <i title="Metric Graph" onclick="openMetric('${scalarGr.link}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1090 ---- <div class='panel panel-red panel-widget' title="Open WebDashboard" style="cursor:pointer;" onclick="openDashboard('${testReportND.getDashboardURL()}')"> ---- == Inline Event Handler Line: 1100 ---- <div class='panel panel-red panel-widget' title="Open HTML Report" style="cursor:pointer;" onclick="openHtmlReport('${testReportND.getReportLink()}')"> ---- == Inline Event Handler Line: 1163 ---- <div class='panel panel-red panel-widget' title="Open WebDashboard" style="cursor:pointer;" onclick="openDashboard('${testReportND.getDashboardURL()}')"> ---- == Inline Event Handler Line: 1173 ---- <div class='panel panel-red panel-widget' title="Open HTML Report" style="cursor:pointer;" onclick="openHtmlReport('${testReportND.getReportLink()}')"> ---- == Inline Event Handler Line: 1331 ---- <td align='right' style='background:${suit_metric.currValue.substring( suit_metric.currValue.indexOf("-") + 1, suit_metric.currValue.indexOf(")"))};color:blue;cursor:pointer;' onclick="openEd('${suit_metric.edLink}')"> ---- == Inline Event Handler Line: 1395 ---- <i title="Trend Graph" onclick="openTrend('${suit_metric.linkForTrend}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1396 ---- <i title="Metric Graph" onclick="openMetric('${suit_metric.metricLink}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1524 ---- <i title="Trend Link" onclick="openTrend('${values.trendLink}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1548 ---- <i title="Metric Graph" onclick="openMetric('${metrLink}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1686 ---- <i title="Trend Link" onclick="openTrend('${values.trendLink}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1710 ---- <i title="Metric Graph" onclick="openMetric('${metrLink}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1828 ---- <i title="Trend Link" onclick="openTrend('${scalarGr.trendLink}')" class='fa fa-line-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1832 ---- <i title="Metric Graph" onclick="openMetric('${scalarGr.link}')" class='fa fa-bar-chart' aria-hidden='true'> ---- == Inline Event Handler Line: 1879 ---- <img src ="${rootURL}/plugin/cavisson-ns-nd-integration/images/arrow_r.png" title="Show or Hide Transaction Report" style="margin-right:8px" onClick='showOrHideReport()' id = "showOrHideReportImgId"/> ----
Solutions
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers