jenkinsci / jenkinsci/customizable-header-plugin
403 Crumb Not Found on build trigger after upgrading to 293.v754cfe8036d5
- Dominant language
- Java
- Stars
- 9
- Forks
- 13
- Avg merge
- 6h 38m
- Merged PRs (30d)
- 6
Description
### Jenkins and plugins versions report
Environment
```text
Jenkins: 2.541.3
OS: Linux - 6.8.0-1044-azure
Java: 21.0.10 - Ubuntu (OpenJDK 64-Bit Server VM)
---
ant:520.vd082ecfb_16a_9
antisamy-markup-formatter:173.v680e3a_b_69ff3
apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83
apache-httpcomponents-client-5-api:5.6-191.vb_47e2b_41c698
asm-api:9.9.1-189.vb_5ef2964da_91
authentication-tokens:1.144.v5ff4a_5ec5c33
blueocean-commons:1.27.25
bootstrap5-api:5.3.8-895.v4d0d8e47fea_d
bouncycastle-api:2.30.1.83-289.v8426fcd19371
branch-api:2.1280.v0d4e5b_b_460ef
build-name-setter:2.5.1
build-timeout:1.40
build-user-vars-plugin:214.va_eed2ed849ca_
caffeine-api:3.2.3-194.v31a_b_f7a_b_5a_81
checks-api:402.vca_263b_f200e3
cloudbees-bitbucket-branch-source:937.2.5
cloudbees-folder:6.1079.vc0975c2de294
commons-collections4-api:4.5.0-8.va_d5448ef9011
commons-lang3-api:3.20.0-109.ve43756e2d2b_4
commons-text-api:1.15.0-218.va_61573470393
credentials:1496.vf6821f162d4e
credentials-binding:717.v951d49b_5f3a_a_
customizable-header:251.253.v020b_2d444b_ec
dark-theme:652.vea_da_dfea_e769
display-url-api:2.217.va_6b_de84cc74b_
durable-task:664.v2b_e7a_dfff66c
echarts-api:6.0.0-1247.vf3e35a_c1813f
eddsa-api:0.3.0.1-29.v67e9a_1c969b_b_
email-ext:1933.v45cec755423f
favorite:2.263.v941d21defef7
file-parameters:425.v3fa_801681b_5e
flatpickr-api:4.6.13-32.v60a_51029c136
font-awesome-api:7.2.0-965.ve3840b_696418
git:5.10.0
git-client:6.5.0
github:1.46.0
github-api:1.330-492.v3941a_032db_2a_
github-branch-source:1967.vdea_d580c1a_b_a_
google-login:109.v022b_cf87b_e5b_
gradle:2.18.1203.v2c96b_1243c72
gson-api:2.13.2-173.va_a_092315913c
handy-uri-templates-2-api:2.1.8-38.vcea_5d521d5f3
htmlpublisher:427
instance-identity:203.v15e81a_1b_7a_38
ionicons-api:94.vcc3065403257
jackson2-api:2.21.1-428.vf8dd988fa_d8d
jackson3-api:3.1.0-64.v37e742c35905
jakarta-activation-api:2.1.4-1
jakarta-mail-api:2.1.5-1
jakarta-xml-bind-api:4.0.6-12.vb_1833c1231d3
javax-activation-api:1.2.0-8
javax-mail-api:1.6.2-11
jaxb:2.3.9-143.v5979df3304e6
jenkins-design-language:1.27.25
jjwt-api:0.11.5-120.v0268cf544b_89
joda-time-api:2.14.1-187.vdf2def02b_8a_1
jquery3-api:3.7.1-619.vdb_10e002501a_
json-api:20251224-185.v0cc18490c62c
json-path-api:3.0.0-218.vcd4dd1355de2
jsoup:1.22.1-76.v9cdb_2456c0e3
junit:1403.vd9d1413fd205
kubernetes:4423.vb_59f230b_ce53
kubernetes-client-api:7.3.1-256.v788a_0b_787114
kubernetes-credentials:207.v492f58828b_ed
ldap:807.v7d7de30930cf
mailer:534.v1b_36f5864073
matrix-auth:3.2.9
matrix-project:870.v9db_fcfc2f45b_
metrics:4.2.37-494.v06f9a_939d33a_
mina-sshd-api-common:2.16.0-167.va_269f38cc024
mina-sshd-api-core:2.16.0-167.va_269f38cc024
nodelabelparameter:851.vd94e5048d321
nord-theme:1.1
okhttp-api:5.3.2-200.vedb_720a_cf1f8
pam-auth:1.12
parameter-separator:334.v1fc0e534c71d
parameterized-scheduler:379.v95c73f233a_df
parameterized-trigger:890.vc240a_a_e1217f
pipeline-build-step:584.vdb_a_2cc3a_d07a_
pipeline-github-lib:65.v203688e7727e
pipeline-graph-analysis:254.v0f63a_a_447dca_
pipeline-graph-view:803.vb_88f7a_a_1cb_47
pipeline-groovy-lib:787.ve2fef0efdca_6
pipeline-input-step:540.v14b_100d754dd
pipeline-milestone-step:138.v78ca_76831a_43
pipeline-model-api:2.2277.v00573e73ddf1
pipeline-model-definition:2.2277.v00573e73ddf1
pipeline-model-extensions:2.2277.v00573e73ddf1
pipeline-stage-step:322.vecffa_99f371c
pipeline-stage-tags-metadata:2.2277.v00573e73ddf1
plain-credentials:199.v9f8e1f741799
plugin-util-api:6.1192.v30fe6e2837ff
prism-api:1.30.0-703.v116fb_3b_5b_b_a_a_
pubsub-light:1.19
rebuild:338.va_0a_b_50e29397
resource-disposer:0.25
role-strategy:848.va_a_ea_673cf0b_c
scm-api:728.vc30dcf7a_0df5
script-security:1399.ve6a_66547f6e1
slack:795.v4b_9705b_e6d47
snakeyaml-api:2.5-149.v72471e9c6371
snakeyaml-engine-api:3.0.1-5.vd98ea_ff3b_92e
solarized-theme:31.v46d438294692
sse-gateway:1.29
ssh-credentials:361.vb_f6760818e8c
ssh-slaves:3.1097.v868116049892
structs:362.va_b_695ef4fdf9
theme-manager:344.vd7b_e20e046dc
thinBackup:2.1.3
timestamper:1.30
token-macro:477.vd4f0dc3cb_cf1
trilead-api:2.284.v1974ea_324382
uno-choice:2.8.9
variant:70.va_d9f17f859e0
workflow-aggregator:608.v67378e9d3db_1
workflow-api:1398.v67030756d3fb_
workflow-basic-steps:1098.v808b_fd7f8cf4
workflow-cps:4261.va_1fa_c7e4db_da_
workflow-durable-task-step:1464.v2d3f5c68f84c
workflow-job:1571.vb_423c255d6d9
workflow-multibranch:821.vc3b_4ea_780798
workflow-scm-step:466.va_d69e602552b_
workflow-step-api:710.v3e456cc85233
workflow-support:1015.v785e5a_b_b_8b_22
ws-cleanup:0.49
```
### What Operating System are you using (both controller, and any agents involved in the problem)?
Ubuntu 22.04
### Reproduction steps
1. Upgrade plugin to `293.v754cfe8036d5`
2. Navigate to any job page
3. Click "Build Now" (or trigger any build action)
4. Observe 403 Crumb Not Found error — build does not trigger
5. Wait on the page until the header logo fails to load
6. Click "Build Now" again — build triggers successfully
### Expected Results
Build triggers should work immediately without requiring the logo to fail first. CSRF crumb should be available and valid from initial page load.
### Actual Results
After upgrading the Customizable Header Plugin to `293.v754cfe8036d5`, clicking "Build Now" on any job consistently returns a **403 Crumb Not Found** error, blocking all build triggers.
### Anything else?
The environment information given above is about the working version, not the bad one. The bad plugin version is 293.v754cfe8036d5.
### Are you interested in contributing a fix?
No
Contributor guide
Assessment
This issue has not been assessed yet.