jenkinsci / jenkinsci/nested-data-reporting-plugin
[JENKINS-74446] [nested-data-reporting] Extract inline script blocks in io/jenkins/plugins/reporter/JobAction/floatingBox.jelly
- Dominant language
- Java
- Stars
- 9
- Forks
- 10
- Avg merge
- 1m
- Merged PRs (30d)
- 5
Description
Problems
```
== Inline Script Block
Line: 12
----
var view = <st:bind value="${from}"/>
----
== Inline Script Block
Line: 13
----
view.getTrendId(function (id) {
echartsJenkinsApi.configureTrend(id.responseJSON)
});
----
```
Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
---
Originally reported by basil, imported from: [nested-data-reporting] Extract inline script blocks in io/jenkins/plugins/reporter/JobAction/floatingBox.jelly
Raw content of original issue
Problems
== Inline Script Block
Line: 12
----
<script>var view = <st:bind value="${from}"/></script>
----== Inline Script Block
Line: 13
----
<script>
view.getTrendId(function (id) {
echartsJenkinsApi.configureTrend(id.responseJSON)
});
</script>
----Solution
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
Contributor guide
Assessment
This issue has not been assessed yet.