Skip to content

XSS vulnerability addressing #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
panicking wants to merge 4 commits into
base: master
Choose a base branch
from
Open

XSS vulnerability addressing #15

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ee15f60
bump to 2.387.3 to addressing XSS script vulnerability
panicking Dec 10, 2023
21c11f2
index.jelly: Escape the title explicity
panicking Dec 10, 2023
3f1ffa3
[maven-release-plugin] prepare release v0.0.5
panicking Dec 10, 2023
ffca736
[maven-release-plugin] prepare for next development iteration
panicking Dec 10, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 3 additions & 8 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,23 +5,18 @@
<parent>
<groupId>org.jenkins-ci.plugins</groupId>
<artifactId>plugin</artifactId>
<version>2.11</version>
<version>4.75</version>
<relativePath />
</parent>

<properties>
<!-- Baseline Jenkins version you use to build the plugin. Users must have this version or newer to run. -->
<jenkins.version>1.614</jenkins.version>
<!-- Other properties you may want to use:
~ java.level: set to 6 if your jenkins.version <= 1.611 ~ jenkins-test-harness.version: Jenkins Test Harness version you use to test the plugin. For Jenkins version >= 1.580.1 use JTH 2.0 or higher.
~ hpi-plugin.version: The HPI Maven Plugin version used by the plugin..
~ stapler-plugin.version: The Stapler Maven plugin version required by the plugin.
-->
<jenkins.version>2.387.3</jenkins.version>
</properties>

<groupId>me.leejay.jenkins</groupId>
<artifactId>date-parameter</artifactId>
<version>0.0.5-SNAPSHOT</version>
<version>0.0.6-SNAPSHOT</version>
<packaging>hpi</packaging>
<name>Date Parameter Plugin</name>
<url>https://wiki.jenkins-ci.org/display/JENKINS/Date+Parameter+Plugin</url>
Expand Down
6 changes: 3 additions & 3 deletions src/main/resources/me/leejay/jenkins/dateparameter/DateParameterDefinition/index.jelly
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@
<j:jelly xmlns:j="jelly:core"
xmlns:f="/lib/form"
>

<f:entry title="${it.name}" description="${it.description}">
<j:set var="escapeEntryTitleAndDescription" value="false"/>
<f:entry title="${h.escape(it.name)}" description="${it.description}">
<div name="parameter" description="${it.description}">
<input type="hidden" name="name" value="${it.name}"/>
<f:textbox name="value" value="${it.value}"/>
</div>
</f:entry>
</j:jelly>
</j:jelly>