Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-48939

PRQA Plugin is affected by JEP-200 in Jenkins 2.102+

    Details

    • Similar Issues:

      Description

      During the code inspections for JEP-200 I have discovered that the plugin is most likely affected by this security hardening in the Jenkins core.

      • Plugin uses PRQAComplianceStatus in MasterToSlaveCallable operations
      • This class comes from an external library without a "Jenkins-ClassFilter-Whitelisted" manifest entry
      • In Jenkins 2.102+ such classes will be blacklisted unless a workaround is applied

      You can find more guidelines for plugin developers in this blogpost: https://jenkins.io/blog/2018/01/13/jep-200/#for-plugin-developers. Please let us know if you need any additional info or reviews regarding this issue.

        Attachments

          Issue Links

            Activity

            Hide
            priyat Priyanga G added a comment -

            Thank you sir.

            Show
            priyat Priyanga G added a comment - Thank you sir.
            Hide
            marcos_bento Marcos Bento added a comment -

            This issue is fixed in PRQA Jenkins plugin 3.0.1.

            Show
            marcos_bento Marcos Bento added a comment - This issue is fixed in PRQA Jenkins plugin 3.0.1.
            Hide
            oleg_nenashev Oleg Nenashev added a comment -

            Marcos Bento there is no source code in https://github.com/jenkinsci/prqa-plugin . Could you please push it?

            Show
            oleg_nenashev Oleg Nenashev added a comment - Marcos Bento there is no source code in https://github.com/jenkinsci/prqa-plugin . Could you please push it?
            Hide
            marcos_bento Marcos Bento added a comment -

            The source code has been pushed.

            Show
            marcos_bento Marcos Bento added a comment - The source code has been pushed.
            Hide
            oleg_nenashev Oleg Nenashev added a comment -

            thanks!

            Show
            oleg_nenashev Oleg Nenashev added a comment - thanks!

              People

              • Assignee:
                marcos_bento Marcos Bento
                Reporter:
                oleg_nenashev Oleg Nenashev
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: