search

jenkinsci / badge-plugin

Jenkins Badge plugin
https://plugins.jenkins.io/badge/
MIT License
32 stars 43 forks source link

Add checkbox in config allowing JavaScript usage in badges/summaries #13

Closed tifhorn closed 6 years ago

tifhorn commented 6 years ago

I know that allowing JS can cause script injections, but is there a possibility to leave this choice to Jenkins users?

I've been using some JS in previous version of Badge Plugin and with new version it's impossible to add any script tag (or maybe I'm unaware of a way to do so).

bakito commented 6 years ago

I go a security issue from jenkins and had to disable JS. See https://jenkins.io/security/advisory/2018-06-25/#SECURITY-906

Can not do much about it. Sorry

tifhorn commented 6 years ago

Now I understand... Do you know any other way to add custom JavaScript scripts to Jenkins' builds?

bakito commented 6 years ago

Unfortunately not, sorry