Loading...

XML

Word

Printable

Type: Improvement
Resolution: Unresolved
Priority: Minor
Component/s: core
Labels:
- CSP

Similar Issues:

Show
Epic Link:
CSP incompatibilities in Jenkins core

eval calls in datasource-debug/min.js

Culprits

https://github.com/jenkinsci/jenkins/blob/7301c641a87e517ed0acfe989264b50516b611c1/war/src/main/webapp/scripts/yui/datasource/datasource-debug.js#L1088

https://github.com/jenkinsci/jenkins/blob/7301c641a87e517ed0acfe989264b50516b611c1/war/src/main/webapp/scripts/yui/datasource/datasource-debug.js#L1135

https://github.com/jenkinsci/jenkins/blob/7301c641a87e517ed0acfe989264b50516b611c1/war/src/main/webapp/scripts/yui/datasource/datasource-min.js

Proposal

https://www.jenkins.io/doc/developer/security/csp/#eval-calls

Testing

https://www.jenkins.io/doc/developer/security/csp/#testing

Assignee:: Yaroslav Afenkin

Reporter:: Yaroslav Afenkin

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Created:: 2023-06-22 14:10

Updated:: 2023-08-21 13:23