Commit Graph
210 Commits
Author SHA1 Message Date
Jesse Glick a0b00508ee [FIXED SECURITY-77] XSS in iconSize cookie. 2014-02-11 14:17:00 -05:00
Jesse Glick ebd8ff1f0d [FIXED JENKINS-17087] getSortedDescriptorsForGlobalConfigUnclassified needed to avoid clobbering GlobalCrumbIssuerConfiguration in Jenkins.doConfigSubmit. 2013-03-05 17:55:28 -05:00
Kohsuke Kawaguchi 9447289c87 [FIXED JENKINS-16368]
HyperlinkNote shouldn't emit the absolute URL.
2013-02-28 17:33:36 -08:00
Fred G f19f772322 [FIXED JENKINS-16630] Human readable file size method returns ",00" for
files with byte length 0
2013-02-05 01:26:50 +01:00
Jesse Glick f9da4a867e Found a log file full of IAEs from ModelObjectWithContextMenu.MenuItem due to an (unknown) action with an illegal absolute URI. 2013-02-04 18:11:12 -05:00
Kohsuke Kawaguchi 5218b7618e Introducing GlobalConfigurationCategory.
... instead of creating a copy of each GlobalConfiguration variant (like GlobalSecurityConfigurationPart) for the following reasons:

- This allows future UI to render tabs and other means to divide configurations into even smaller granularity, which is something that has been discussed before.

- Eliminates code duplication between GlobalConfiguration look-alikes.
2012-12-08 17:30:48 -08:00
imod 4ab6fe7cb4 add new EP GlobalSecurityConfigurationPart to enable contributions to the global security configuration page 2012-12-05 18:59:12 +01:00
Kohsuke Kawaguchi 18561d5f24 Revert "1.486 special for a week."
This reverts commit c8e5cb93ec.
2012-10-25 03:02:23 +09:00
Kohsuke Kawaguchi c8e5cb93ec 1.486 special for a week. 2012-10-12 18:31:14 -07:00
Kohsuke Kawaguchi 8891c86af6 share code between <l:ajax> 2012-09-12 14:04:19 -07:00
Kohsuke Kawaguchi e094b90e4c Prevent 404 in .../contextMenu link when there's no context menu 2012-07-23 14:10:16 -07:00
lvotypko ef442a835d Human readable size of files 2012-05-31 12:40:58 +02:00
Kohsuke Kawaguchi 8129412155 follow up fix to c51114a197.
This still is slightly more robust than the original in the sense that it's not affected by the presence/absence of the trailing '/' in itUrl.

----------------------
Comment from @ohtake:

getContextPath() will return "" if Jenkins is served at ROOT.

Assume that getContextPath() => "", itUrl => "iturl" and urlName => "urlName",
value returned was "/iturl/urlName", but is "iturl/urlName" (no slash at 0).
2012-03-01 18:22:36 -08:00
Kohsuke Kawaguchi c51114a197 made the path comuptation more robust 2012-02-28 17:21:43 -08:00
Kohsuke Kawaguchi 5276c2f88a hooking up the whole thing for a demoable state 2012-02-20 22:23:06 +09:00
Kohsuke Kawaguchi 30bb3fde5b adding the server side code to generate context menu 2012-02-20 18:54:53 +09:00
Kohsuke Kawaguchi dd0f362ef8 Follow-up fix to 968c19dfc9
removing static is a binary incompatible change.
2012-02-08 08:45:34 -08:00
Seiji Sogabe 968c19dfc9 should be static. 2012-02-07 00:18:31 +09:00
James Page 09d06a91df Use up-to-date animal-sniffer-annnotations 2012-01-06 13:59:12 +00:00
OHTAKE Tomohiro 47f70c0f59 [FIXED JENKINS-7725] mailto: links should be absolute URIs 2011-10-21 08:47:20 +09:00
OHTAKE Tomohiro cc1f75cdba [FIXED JENKINS-11151] HTTPS default port is 443 2011-09-28 17:27:24 +09:00
Erik Ramfelt 1147884f66 [JENKINS-7494] Adding UserAvatarResolver to make it possible for plugins to add avatar images to user pages 2011-09-27 09:26:10 +09:00
Stephen Connolly 5777744013 Support filtering of descriptors from the global configuration page 2011-07-29 15:42:05 +01:00
Kohsuke Kawaguchi e78e3485fb split off the cloud configuration into GlobalConfiguration 2011-07-26 21:16:33 -07:00
rseguy 3533442f1f Added a new WipeOut permission (enabled through the hudson.security.WipeOutPermission system property) to control the "Wipe Out Workspace" action 2011-06-20 18:18:17 +02:00
rseguy 352b06e588 Added a new hudson.footerURL system property to tweak the link displayed at the bottom of the UI 2011-06-20 15:49:05 +02:00
Jesse Farinacci 7689840966 [FIXED JENKINS-9915] Make captcha support optional; remove LGPL jcaptcha
This change is largely based on changes made by Winston Prakash for Hudson.
The main details about his changes can be found here:

http://issues.hudson-ci.org/browse/HUDSON-8844

I deviated a bit from his changes where it was appropriate (e.g. the
description for allow-signup.html was just plain wrong). Also, there
was a lot of collateral damage from formatting in his changeset, which
I have factored out.

I tested the basic functionality of this change and it seems to be OK.
2011-06-08 22:58:20 -04:00
Nigel Magnay 5679d019ec Move hudson.model.Jenkins to be jenkins.model.Jenkins - part II
Just import changes, from hudson.model.Jenkins -> jenkins.model.Jenkins,
and Javadoc comments.

Signed-off-by: Nigel Magnay <nigel.magnay@gmail.com>
2011-05-29 11:06:28 +01:00
Nigel Magnay 70c1065814 Stage 1 : Create hudson.model.Jenkins, make Hudson derive from Jenkins.
Signed-off-by: Nigel Magnay <nigel.magnay@gmail.com>
2011-05-29 11:00:58 +01:00
Dimitri BAELI 84a78d5bac [FIXED JENKINS-9789] display the list of available CLI Commands 2011-05-28 18:36:25 +02:00
Kohsuke Kawaguchi 1c3d9b05b0 fixed excessive escaping 2011-04-12 16:52:52 -07:00
Kohsuke Kawaguchi f561d53bdb integrated Stapler that handles escaping on i18n exps in a new way 2011-04-12 12:37:11 -07:00
Kohsuke Kawaguchi f46e44bbaf [FIXED JENKINS-9009] Fixed a bug in handling ' and " in matrix build
label axis
2011-04-01 22:48:58 -07:00
Kohsuke Kawaguchi 0e3c245680 report request headers 2011-03-27 18:28:13 -07:00
Kohsuke Kawaguchi 86c610f614 added a tag to override the currentDescriptorByNameUrl 2011-03-21 00:22:59 -07:00
Seiji Sogabe d9a5919480 revert d3e4becef2953b99a69. 2011-03-12 22:47:35 +09:00
Seiji Sogabe 6d3e4becef avoid redundant redirection. 2011-03-12 18:00:27 +09:00
Kohsuke Kawaguchi cc90da3533 added lazy loading support for <f:dropdownListBlock> 2011-03-11 10:28:54 -08:00
Kohsuke Kawaguchi 3102764c89 Generalized the lazy rendering of a fragment to <l:renderOnDemand> tag. 2011-03-11 10:28:54 -08:00
Kohsuke Kawaguchi 7fb63214d7 Used the JavaScript proxy support to lazy load configuration fragments in <l:hetero-list> 2011-03-11 10:28:54 -08:00
Kohsuke Kawaguchi d4db356c1e expose this to plugins 2011-03-01 12:07:25 -08:00
Kohsuke Kawaguchi 7ae71bf12a added a mechanism to filter out descriptors 2011-01-12 19:04:37 -08:00
wjprakash 63a8bc9255 Merging HUDSON-1467
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@35828 71c3de6d-444a-0410-be80-ed276b4c234a
2010-10-12 03:43:40 +00:00
kohsuke 8527286c06 added ability to inject CSS from ConsoleNotes.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@34212 71c3de6d-444a-0410-be80-ed276b4c234a
2010-08-30 18:35:47 +00:00
rseguy e1c25beacc [FIXED HUDSON-1871]
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@34172 71c3de6d-444a-0410-be80-ed276b4c234a
2010-08-27 13:36:27 +00:00
kohsuke 831a6e8b11 allow all Descriptors with global.jelly to participate in the global configuration UI.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@33837 71c3de6d-444a-0410-be80-ed276b4c234a
2010-08-14 07:58:33 +00:00
mindless 7414c3ed21 [FIXED HUDSON-6348] avoid NPE in log from Functions.getCrumb when hudson
start fails and error page is being shown.
Also fix message on NoHomeDir error page to show dir instead of {0}


git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@33085 71c3de6d-444a-0410-be80-ed276b4c234a
2010-07-20 22:04:01 +00:00
kohsuke ad1c0a0b1b <input type='hidden'> field shouldn't be getting the plain text password value.
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@32853 71c3de6d-444a-0410-be80-ed276b4c234a
2010-07-14 00:52:58 +00:00
mindless bbf53fc98b add system property to set auto refresh interval
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@32336 71c3de6d-444a-0410-be80-ed276b4c234a
2010-06-28 22:31:48 +00:00
mindless 2281ccb541 avoid NPE if null href given to hyperlinkMatchesCurrentPage
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@31701 71c3de6d-444a-0410-be80-ed276b4c234a
2010-06-03 16:26:58 +00:00