Skip to content

Commit 6321f09

Browse files
Update value.jelly
XSS vulnerability issue resolve SECURITY-2736
1 parent 6b226c7 commit 6321f09

File tree

1 file changed

+2
-1
lines changed
  • src/main/resources/com/cavisson/jenkins/NetstormStringParameterValue

1 file changed

+2
-1
lines changed

src/main/resources/com/cavisson/jenkins/NetstormStringParameterValue/value.jelly

+2-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,8 @@
22
<j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define"
33
xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form"
44
xmlns:i="jelly:fmt" xmlns:p="/lib/hudson/project">
5-
<f:entry title="${it.name}" description="${it.description}">
5+
<j:set var="escapeEntryTitleAndDescription" value="false"/>
6+
<f:entry title="${h.escape(it.name)}" description="${it.formattedDescription}">
67
<div >
78
<f:textbox name="value" value="${it.value}" readonly="true" />
89
</div>

0 commit comments

Comments
 (0)