[JENKINS-74151] [release] Extract inline script block and event handler in hudson/plugins/release/pipeline/ReleaseStep/config.jelly

[jenkins-infra-bot]

Problems

== Inline Script Block
Line: 34
----
<script>
    function loadParams() {
const div = document.getElementById('params');
const parametersTextBox = document.getElementById('${jobFieldId}')

const url = '${descriptor.descriptorUrl}/parameters?job=' + encodeURIComponent(parametersTextBox.value) + '&amp;context=' + encodeURIComponent('${descriptor.context}')
fetch(url)
    .then(rsp => {
if (rsp.ok) {
    rsp.text().then(responseText => {
div.innerHTML = responseText;
Behaviour.applySubtree(div);
    })
} else {
    div.innerHTML = "<b>ERROR</b>: Failed to load parameter definitions: " + rsp.statusText;
}
    })
    }
</script>
----

== Inline Event Handler
Line: 30
----
<f:textbox onblur="loadParams()" id="${jobFieldId}"/>
----

Solutions

https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers

---

Originally reported by basil, imported from: [release] Extract inline script block and event handler in hudson/plugins/release/pipeline/ReleaseStep/config.jelly

• assignee: shlomo_dahan
• status: In Review
• priority: Minor
• component(s): release-plugin
• label(s): CSP
• resolution: Unresolved
• votes: 0
• watchers: 1
• imported: 20251223-222157

Raw content of original issue

Problems


== Inline Script Block
Line: 34
----
<script>
            function loadParams() {
                const div = document.getElementById('params');
                const parametersTextBox = document.getElementById('${jobFieldId}')

                const url = '${descriptor.descriptorUrl}/parameters?job=' + encodeURIComponent(parametersTextBox.value) + '&amp;context=' + encodeURIComponent('${descriptor.context}')
                fetch(url)
                    .then(rsp => {
                        if (rsp.ok) {
                            rsp.text().then(responseText => {
                                div.innerHTML = responseText;
                                Behaviour.applySubtree(div);
                            })
                        } else {
                            div.innerHTML = "<b>ERROR</b>: Failed to load parameter definitions: " + rsp.statusText;
                        }
                    })
            }
        </script>
----

== Inline Event Handler
Line: 30
----
<f:textbox onblur="loadParams()" id="${jobFieldId}"/>
----


Solutions
https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks
https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers

[jenkins-infra-bot]

• Remote link associated with this issue:

  • PR