Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-74890

[log-parser] CSP compliance for LogParserWriter

XMLWordPrintable

    • 2.3.6

      Problems

      == Inline Script Block (Java)
File: ./src/main/java/hudson/plugins/logparser/LogParserWriter.java
Line: 53
----
<script type=\"text/javascript\">\n"
                + "\tfunction toggleList(list){\n"
                + "\t\telement = document.getElementById(list).style;\n"
                + "\t\telement.display == 'none' ? element.display='block' : element.display='none';\n"
                + "\t}\n" + "</script>
----

== Javascript scheme (Java)
File: ./src/main/java/hudson/plugins/logparser/LogParserWriter.java
Line: 126
----
"<a href=\"javascript:toggleList('"
----

      Solutions

      https://www.jenkins.io/doc/developer/security/csp/

          [JENKINS-74890] [log-parser] CSP compliance for LogParserWriter

          Basil Crow added a comment -

          Once the fix for this issue is merged and released, the workaround added in https://github.com/jenkinsci/acceptance-test-harness/issues/1841 should be reverted.

          Basil Crow added a comment - Once the fix for this issue is merged and released, the workaround added in https://github.com/jenkinsci/acceptance-test-harness/issues/1841 should be reverted.

            yafenkin Yaroslav Afenkin
            basil Basil Crow
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: