Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable InjectedTest & fix found issues #251

Merged
merged 1 commit into from
Jan 5, 2020

Conversation

darxriggs
Copy link
Collaborator

  • enable maven-enforcer-plugin to show plugin incompatibilities & fix them
    • without these changes the plugin would fail to start in InjectedTest
    • "git client" plugin v2.0.0 requires "structs" plugin v1.3 or later
      (it was a transitive dependency via "display-url-api" plugin v1.1.1)
    • "git" plugin v3.0.0 requires "credentials" plugin v2.1.4 or later
  • all .jelly files should escape content per default
  • explicit Hamcrest dependency declaration
    • Hamcrest is used in the tests and therefore should be declared explicitly
    • use the highest version to resolve version conflicts due to transisitivy

- enable maven-enforcer-plugin to show plugin incompatibilities & fix them
  - without these changes the plugin would fail to start in InjectedTest
  - "git client" plugin v2.0.0 requires "structs" plugin v1.3 or later
    (it was a transitive dependency via "display-url-api" plugin v1.1.1)
  - "git" plugin v3.0.0 requires "credentials" plugin v2.1.4 or later
- all .jelly files should escape content per default
  - this was reported via InjectedTest
  - also see https://wiki.jenkins.io/display/JENKINS/Jelly+and+XSS+prevention
- explicit Hamcrest dependency declaration
  - Hamcrest is used in the tests and therefore should be declared explicitly
  - use the highest version to resolve version conflicts due to transisitivy
@scaytrase
Copy link
Member

Thanks @darxriggs !

@scaytrase scaytrase merged commit b924703 into jenkinsci:release/1.x Jan 5, 2020
@darxriggs darxriggs deleted the enable-InjectedTest branch January 5, 2020 10:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants