• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Component/s: qrebel-plugin
• Labels:

  • CSP

[JENKINS-74641] [qrebel] Migrate legacy checkUrl attributes in org/zeroturnaround/jenkins/plugin/qrebel/QRebelPublisher/config.jelly

Basil Crow created issue - 2024-10-24 00:19

Basil Crow made changes - 2024-10-24 00:49

Assignee

Original: vasily tsvetkov [ vasilyt ]

Basil Crow made changes - 2024-10-24 15:40

Description

Original: h4. Problems {noformat} == Legacy checkUrl Line: 7 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 10 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 15 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 32 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 45 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 7 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 10 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 15 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 32 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 45 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]

New: h4. Problems {noformat} == Legacy checkUrl Line: 7 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 10 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 15 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 32 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- == Legacy checkUrl Line: 45 ---- checkUrl="'descriptorByName/QRebelPublisher/checkBlank?value='+escape(this.value)" ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#legacy-javascript-checkurl-validation]