-
Task
-
Resolution: Unresolved
-
Minor
Note
While testing this plugin, evaluate whether the third-party libraries in src/main/webapp are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.
Problem
== Inline Script Block
Line: 45
----
<script type="text/javascript">
var features = [
<j:forEach var="feature" varStatus="st" items="${it.result.featureNames}">
${it.result.features[feature].report}<j:if test="${!st.last}">,</j:if>
</j:forEach>
];
YAHOO.util.Event.onContentReady("rusalad_result_@ID@", function(){render_rusalad_result("rusalad_result_@ID@", features, "${it.build.project.name}", ${it.build.number}, "${imagesURL}", "${request.contextPath}");}, null)
</script>
----
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
[JENKINS-74691] [rusalad-plugin] Extract inline script block in WEB-INF/classes/org/korosoft/hudson/plugin/AbstractCukeTestResultAction/index.jelly
Basil Crow
created issue -
Basil Crow
made changes -
| Description |
Original:
h4. Problems {noformat} == Inline Script Block Line: 45 ---- <script type="text/javascript"> var features = [ <j:forEach var="feature" varStatus="st" items="${it.result.featureNames}"> ${it.result.features[feature].report}<j:if test="${!st.last}">,</j:if> </j:forEach> ]; YAHOO.util.Event.onContentReady("rusalad_result_@ID@", function(){render_rusalad_result("rusalad_result_@ID@", features, "${it.build.project.name}", ${it.build.number}, "${imagesURL}", "${request.contextPath}");}, null) </script> ---- == Inline Script Block Line: 45 ---- <script type="text/javascript"> var features = [ <j:forEach var="feature" varStatus="st" items="${it.result.featureNames}"> ${it.result.features[feature].report}<j:if test="${!st.last}">,</j:if> </j:forEach> ]; YAHOO.util.Event.onContentReady("rusalad_result_@ID@", function(){render_rusalad_result("rusalad_result_@ID@", features, "${it.build.project.name}", ${it.build.number}, "${imagesURL}", "${request.contextPath}");}, null) </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
New:
h4. Problem {noformat} == Inline Script Block Line: 45 ---- <script type="text/javascript"> var features = [ <j:forEach var="feature" varStatus="st" items="${it.result.featureNames}"> ${it.result.features[feature].report}<j:if test="${!st.last}">,</j:if> </j:forEach> ]; YAHOO.util.Event.onContentReady("rusalad_result_@ID@", function(){render_rusalad_result("rusalad_result_@ID@", features, "${it.build.project.name}", ${it.build.number}, "${imagesURL}", "${request.contextPath}");}, null) </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
| Summary | Original: [rusalad-plugin] Extract inline script blocks in WEB-INF/classes/org/korosoft/hudson/plugin/AbstractCukeTestResultAction/index.jelly | New: [rusalad-plugin] Extract inline script block in WEB-INF/classes/org/korosoft/hudson/plugin/AbstractCukeTestResultAction/index.jelly |
Basil Crow
made changes -
| Description |
Original:
h4. Problem {noformat} == Inline Script Block Line: 45 ---- <script type="text/javascript"> var features = [ <j:forEach var="feature" varStatus="st" items="${it.result.featureNames}"> ${it.result.features[feature].report}<j:if test="${!st.last}">,</j:if> </j:forEach> ]; YAHOO.util.Event.onContentReady("rusalad_result_@ID@", function(){render_rusalad_result("rusalad_result_@ID@", features, "${it.build.project.name}", ${it.build.number}, "${imagesURL}", "${request.contextPath}");}, null) </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |
New:
h1. Note
*While testing this plugin, evaluate whether the third-party libraries in {{src/main/webapp}} are compatible with CSP in restrictive mode. The plugin may need to be upgraded from jQuery 1.x to 3.x to fully function in CSP restrictive mode.* h4. Problem {noformat} == Inline Script Block Line: 45 ---- <script type="text/javascript"> var features = [ <j:forEach var="feature" varStatus="st" items="${it.result.featureNames}"> ${it.result.features[feature].report}<j:if test="${!st.last}">,</j:if> </j:forEach> ]; YAHOO.util.Event.onContentReady("rusalad_result_@ID@", function(){render_rusalad_result("rusalad_result_@ID@", features, "${it.build.project.name}", ${it.build.number}, "${imagesURL}", "${request.contextPath}");}, null) </script> ---- {noformat} h4. Solution [https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks] |