jenkinsci / jenkinsci/appscan-plugin
[JENKINS-74373] [appscan] Extract inline script block in com/hcl/appscan/jenkins/plugin/actions/ResultsRetriever/summary.jelly
Open
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 10
- Forks
- 30
- Avg merge
- 6d 20h
- Merged PRs (30d)
- 1
Description
Problem
== Inline Script Block
Line: 22
----
<script>location.reload(true);</script>
----
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
Originally reported by basil, imported from: [appscan] Extract inline script block in com/hcl/appscan/jenkins/plugin/actions/ResultsRetriever/summary.jelly
- status: Open
- priority: Minor
- component(s): _unsorted
- label(s): CSP
- resolution: Unresolved
- votes: 0
- watchers: 1
- imported: 2025-12-08
Raw content of original issue
Problem
== Inline Script Block Line: 22 ---- <script>location.reload(true);</script> ----Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Open com/hcl/appscan/jenkins/plugin/actions/ResultsRetriever/summary.jelly and inspect the inline script at line 22. Read Jenkins's inline JavaScript blocks CSP guidance linked in the issue before deciding how to preserve the reload behavior without an inline script. Done means the CSP report no longer flags this block and the affected summary view still behaves correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100