search

zebrunner / jenkins

11 stars 10 forks source link

remove CSP customization when we stop publishing ZafiraReport to the jobs #215

Open vdelendik opened 4 years ago

vdelendik commented 4 years ago

Need to follow jenkins warning and stop using "hudson.model.DirectoryBrowserSupport.CSP" property

The default Content-Security-Policy is currently overridden using the hudson.model.DirectoryBrowserSupport.CSP system property, which is a potential security issue when browsing untrusted files. As an alternative, you can set up a Resource Root URL that Jenkins will use to serve some static files without adding Content-Security-Policy headers.

image

vdelendik commented 3 years ago

Resource Root URL feature is too specific and require extra domain name and setup. Later we are going to avoid all kind of publish operations with customized Zafira reports so SCP customization might be removed at all. Updated subject accordingly

vdelendik commented 2 years ago

we need direct link to the zebrunner reporting run and completely destroy publishing of html files as part of build output