Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-74669

[zscaler-iac-scan] Extract inline script block and event handler in io/jenkins/plugins/zscaler/Report/index.jelly

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Minor Minor
    • _unsorted

      Problems

      == Inline Script Block
      Line: 9
      ----
      <script>
                      function resizeIframe(obj) {
                          obj.contentWindow.postMessage(${it.results},'${it.reportUrl}');
                      }
                  </script>
      ----
      
      == Inline Event Handler
      Line: 15
      ----
      <iframe
                          data-crumbtoken-field="${it.crumbRequestField}"
                          data-crumbtoken="${it.crumbToken}"
                          style="border: none;min-width: 800px; height: 100%"
                          id="iac-plugin-container"
                          width="100%" src="${it.reportUrl}"
                          onload="resizeIframe(this)"
                  />
      ----
      

      Solutions

      https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
      https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers

            Unassigned Unassigned
            basil Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: