OpenSource/jenkins
1
0 Fork 0
mirror of https://github.com/jenkinsci/jenkins.git synced 2026-11-13 20:12:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

[SECURITY-3037]

Browse Source
This commit is contained in:
Yaroslav Afenkin authored and Jenkins CERT CI committed 2023-02-23 07:59:06 +00:00
1 parent b70f4cb589
commit 59ac866d99
3 files changed
+172 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

core/src/main/java/hudson/PluginManager.java
+6 -2
View File
@@ -1469,7 +1469,11 @@ public abstract class PluginManager extends AbstractModelObject implements OnMas
jsonObject.put("sourceId", plugin.sourceId);
jsonObject.put("title", plugin.title);
jsonObject.put("displayName", plugin.getDisplayName());
jsonObject.put("wiki", plugin.wiki);
if (plugin.wiki == null || !(plugin.wiki.startsWith("https://") || plugin.wiki.startsWith("http://"))) {
jsonObject.put("wiki", StringUtils.EMPTY);
} else {
jsonObject.put("wiki", plugin.wiki);
}
jsonObject.put("categories", plugin.getCategoriesStream()
.filter(PluginManager::isNonMetaLabel)
.map(UpdateCenter::getCategoryDisplayName)
@@ -1486,7 +1490,7 @@ public abstract class PluginManager extends AbstractModelObject implements OnMas
jsonObject.put("version", plugin.version);
jsonObject.put("popularity", plugin.popularity);
if (plugin.isForNewerHudson()) {
jsonObject.put("newerCoreRequired", Messages.PluginManager_coreWarning(plugin.requiredCore));
jsonObject.put("newerCoreRequired", Messages.PluginManager_coreWarning(Util.xmlEscape(plugin.requiredCore)));
}
if (plugin.hasWarnings()) {
JSONObject unresolvedSecurityWarnings = new JSONObject();