Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-34853

plugin inpact by SECURITY-170

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Reserved resources variable name will not work after the SECURITY-170 update so you need to use the workaround (-Dhudson.model.ParametersAction.safeParameters)

      log :
      May 16, 2016 10:32:48 AM hudson.model.ParametersAction filter
      WARNING: Skipped parameter `Test` as it is undefined on `test_lock`. Set `-Dhudson.model.ParametersAction.keepUndefinedParameters`=true to allow undefined parameters to be injected as environment variables or `-Dhudson.model.ParametersAction.safeParameters=[comma-separated list]` to whitelist specific parameter names, even though it represents a security breach
      May 16, 2016 10:32:48 AM hudson.model.ParametersAction filter
      WARNING: Skipped parameter `Test` as it is undefined on `test_lock`. Set `-Dhudson.model.ParametersAction.keepUndefinedParameters`=true to allow undefined parameters to be injected as environment variables or `-Dhudson.model.ParametersAction.safeParameters=[comma-separated list]` to whitelist specific parameter names, even though it represents a security breach
      May 16, 2016 10:35:19 AM winstone.Logger logInternal

        Attachments

          Issue Links

            Activity

            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Antonio Muñiz
            Path:
            pom.xml
            src/main/java/org/jenkins/plugins/lockableresources/actions/ResourceVariableNameAction.java
            src/main/java/org/jenkins/plugins/lockableresources/queue/LockRunListener.java
            src/test/java/org/jenkins/plugins/lockableresources/BasicIntegrationTest.java
            http://jenkins-ci.org/commit/lockable-resources-plugin/5c19ed7a2887a41dac999876b1d9381bf414732b
            Log:
            JENKINS-34853 Inject required resources environment as a custom Action. Acknowledge SECURITY-170

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Antonio Muñiz Path: pom.xml src/main/java/org/jenkins/plugins/lockableresources/actions/ResourceVariableNameAction.java src/main/java/org/jenkins/plugins/lockableresources/queue/LockRunListener.java src/test/java/org/jenkins/plugins/lockableresources/BasicIntegrationTest.java http://jenkins-ci.org/commit/lockable-resources-plugin/5c19ed7a2887a41dac999876b1d9381bf414732b Log: JENKINS-34853 Inject required resources environment as a custom Action. Acknowledge SECURITY-170
            Hide
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Antonio
            Path:
            pom.xml
            src/main/java/org/jenkins/plugins/lockableresources/actions/ResourceVariableNameAction.java
            src/main/java/org/jenkins/plugins/lockableresources/queue/LockRunListener.java
            src/main/resources/index.jelly
            src/main/resources/org/jenkins/plugins/lockableresources/LockStep/config.jelly
            src/main/resources/org/jenkins/plugins/lockableresources/LockableResource/config.jelly
            src/main/resources/org/jenkins/plugins/lockableresources/LockableResourcesManager/config.jelly
            src/main/resources/org/jenkins/plugins/lockableresources/RequiredResourcesProperty/config.jelly
            src/test/java/org/jenkins/plugins/lockableresources/BasicIntegrationTest.java
            http://jenkins-ci.org/commit/lockable-resources-plugin/b4ff2feb925e10b7d6a6e1bff760049062106585
            Log:
            Merge pull request #31 from amuniz/JENKINS-34853

            JENKINS-34853 Inject required resources environment variable

            Compare: https://github.com/jenkinsci/lockable-resources-plugin/compare/a57c50c636a1...b4ff2feb925e

            Show
            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Antonio Path: pom.xml src/main/java/org/jenkins/plugins/lockableresources/actions/ResourceVariableNameAction.java src/main/java/org/jenkins/plugins/lockableresources/queue/LockRunListener.java src/main/resources/index.jelly src/main/resources/org/jenkins/plugins/lockableresources/LockStep/config.jelly src/main/resources/org/jenkins/plugins/lockableresources/LockableResource/config.jelly src/main/resources/org/jenkins/plugins/lockableresources/LockableResourcesManager/config.jelly src/main/resources/org/jenkins/plugins/lockableresources/RequiredResourcesProperty/config.jelly src/test/java/org/jenkins/plugins/lockableresources/BasicIntegrationTest.java http://jenkins-ci.org/commit/lockable-resources-plugin/b4ff2feb925e10b7d6a6e1bff760049062106585 Log: Merge pull request #31 from amuniz/ JENKINS-34853 JENKINS-34853 Inject required resources environment variable Compare: https://github.com/jenkinsci/lockable-resources-plugin/compare/a57c50c636a1...b4ff2feb925e
            Hide
            amuniz Antonio Muñiz added a comment -

            Released as 1.9

            Show
            amuniz Antonio Muñiz added a comment - Released as 1.9

              People

              Assignee:
              amuniz Antonio Muñiz
              Reporter:
              nmavor nadav mavor
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: