jenkinsci / jenkinsci/script-security-plugin

[JENKINS-54960] Closure-less overloads in DefaultGroovyMethods should be whitelisted

Open
#821 0 comments 0 reactions 0 assignees View on GitHub
component:script-security-plugin imported-jira-issue priority:minor resolution:unresolved
Dominant language
Java
Stars
76
Forks
181
Avg merge
14h 55m
Merged PRs (30d)
3

Description

These collection utility methods from DefaultGroovyMethods are currently whitelisted:


  • any

  • collect

  • every

  • find

  • findAll

  • max

  • min

However, only the overloads taking a closure as an argument are whitelisted. There are also overloads that don't take a closure (calling which is equivalent to passing Closure.IDENTITY as the argument). I think those should be whitelisted as well.

---
Originally reported by rdonchen_intel, imported from: Closure-less overloads in DefaultGroovyMethods should be whitelisted


  • status: Open
  • priority: Minor
  • component(s): script-security-plugin
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 2025-12-09

Raw content of original issue

These collection utility methods from DefaultGroovyMethods are currently whitelisted:


  • any

  • collect

  • every

  • find

  • findAll

  • max

  • min

However, only the overloads taking a closure as an argument are whitelisted. There are also overloads that don't take a closure (calling which is equivalent to passing Closure.IDENTITY as the argument). I think those should be whitelisted as well.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.