[JENKINS-56689] Much-used String.join() method not in default whitelist

The String.join() method, as referenced in JENKINS-37527">JENKINS-37527, is not actually whitelisted by default.

String.split() is whitelisted by default. Shouldn't these be whitelisted?

---
Originally reported by daniel_c_686, imported from: Much-used String.join() method not in default whitelist

• assignee: daniel_c_686
  
• status: Open
  
• priority: Minor
  
• component(s): script-security-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-09
  

Raw content of original issue

The String.join() method, as referenced in JENKINS-37527, is not actually whitelisted by default.


String.split() is whitelisted by default. Shouldn't these be whitelisted?