-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Minor
-
Component/s: wwpass-plugin
Problems
== Inline Script Block
Line: 35
----
<script type="text/javascript">
options = {
'render': 'qrcode',
'ticketURL' : '${app.rootURL}/federatedLoginService/wwpass/getTicket',
callback : function(status, message) {
auth_cb(status, message);
}
};
wwpassQRCodeAuth(options);
create_wwpass_form('${app.rootURL}/federatedLoginService/wwpass/startAssociate');
</script>
----
== Inline Event Handler
Line: 14
----
<button type='button'
id="btn-login"
class="button-login"
onclick="javascript:associate('${instance.descriptor.name}', '${rootURL}/federatedLoginService/wwpass/startAssociate')">
----
Solutions
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers