-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Minor
-
Component/s: _unsorted
Problems
== Inline Script Block
Line: 12
----
<script> jq$ = jQuery.noConflict();</script>
----
== Inline Event Handler
Line: 29
----
<a href='#' style='position: absolute; right: 250px; top: 120px; width: 200px;' onClick="
jq$( '#dialogStatistic' ).dialog({ minWidth: 1000 });
jq$( '#dialogStatistic' ).dialog( 'open' );
"
>
----
== Inline Event Handler
Line: 41
----
<a href='#' style='position: absolute; right: 10px; top: 180px; width: 200px;' onClick="
var button = document.getElementById('noneButton');
for (const line of document.getElementsByClassName('none')){
if (button.innerHTML=='Hide None')
line.style.display='none';
else
line.style.display='';
}
if (button.innerHTML=='Hide None') {
button.innerHTML='Show None';
} else {
button.innerHTML='Hide None';
}" id='noneButton'>
----
== Inline Event Handler
Line: 58
----
<a href='#' style='position: absolute; right: 10px; top: 225px; width: 200px;' onClick="
var button = document.getElementById('classifiedButton');
for (const line of document.getElementsByClassName('classified')){
if (button.innerHTML=='Hide Classified')
line.style.display='none';
else
line.style.display='';
}
if (button.innerHTML=='Hide Classified') {
button.innerHTML='Show Classified';
} else {
button.innerHTML='Hide Classified';
}
" id='classifiedButton'>
----
== Inline Event Handler
Line: 76
----
<a href='#' style='position: absolute; right: 250px; top: 225px; width: 200px;' onClick="
var button = document.getElementById('unclassifiedButton');
for (const line of document.getElementsByClassName('unclassifyable')){
if (button.innerHTML=='Hide Unclassifyable')
line.style.display='none';
else
line.style.display='';
}
if (button.innerHTML=='Hide Unclassifyable') {
button.innerHTML='Show Unclassifyable';
} else {
button.innerHTML='Hide Unclassifyable';
}
" id='unclassifiedButton'>
----
Solutions
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers