-
Improvement
-
Resolution: Done
-
Minor
HudsonPrivateSecurityRealm/signup.jelly has inline JavaScript.
Culprit
- HudsonPrivateSecurityRealm/signup.jelly#L228
- HudsonPrivateSecurityRealm/signup.jelly#L235
- HudsonPrivateSecurityRealm/signup.jelly#L144-L223
- HudsonPrivateSecurityRealm/signup.jelly#L243-L247
- HudsonPrivateSecurityRealm/signup.jelly#L269-L274
Proposal
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
Testing
- links to