Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-36206

Add staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods drop java.lang.CharSequence int to generic-whiteliest

XMLWordPrintable

      Pending review of course. Not sure what security implications there might be here.

      To reproduce:

      node {
    env.WORKSPACE = pwd()
    test = env.WORKSPACE.drop(3)
}

      Results in:

      org.jenkinsci.plugins.scriptsecurity.sandbox.RejectedAccessException: Scripts not permitted to use staticMethod org.codehaus.groovy.runtime.DefaultGroovyMethods drop java.lang.CharSequence int
	at org.jenkinsci.plugins.scriptsecurity.sandbox.whitelists.StaticWhitelist.rejectStaticMethod(StaticWhitelist.java:174)

      Reproducible with Sandbox enabled (or using Jenkinsfile obviously)

            jglick Jesse Glick
            owood Owen Wood
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: