Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
LinuxSuRen
jenkins
提交
b848f853
J
jenkins
项目概览
LinuxSuRen
/
jenkins
与 Fork 源项目一致
从无法访问的项目Fork
通知
2
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
J
jenkins
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
b848f853
编写于
1月 22, 2020
作者:
J
Jeff Thompson
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Use the stapler incremental now that's republished.
上级
acebd93d
变更
2
隐藏空白更改
内联
并排
Showing
2 changed file
with
34 addition
and
31 deletion
+34
-31
core/pom.xml
core/pom.xml
+1
-1
test/src/test/java/jenkins/security/StackTraceSuppressionTest.java
...test/java/jenkins/security/StackTraceSuppressionTest.java
+33
-30
未找到文件。
core/pom.xml
浏览文件 @
b848f853
...
...
@@ -39,7 +39,7 @@ THE SOFTWARE.
<properties>
<staplerFork>
true
</staplerFork>
<stapler.version>
1.25
8
</stapler.version>
<stapler.version>
1.25
9-rc1393.7b6d39453a92
</stapler.version>
<spring.version>
2.5.6.SEC03
</spring.version>
<groovy.version>
2.4.12
</groovy.version>
</properties>
...
...
test/src/test/java/jenkins/security/StackTraceSuppressionTest.java
浏览文件 @
b848f853
...
...
@@ -23,6 +23,7 @@
*/
package
jenkins.security
;
import
com.gargoylesoftware.htmlunit.Page
;
import
com.gargoylesoftware.htmlunit.html.HtmlPage
;
import
hudson.model.FreeStyleProject
;
import
hudson.model.ItemGroup
;
...
...
@@ -34,6 +35,7 @@ import org.junit.Rule;
import
org.junit.Test
;
import
org.jvnet.hudson.test.JenkinsRule
;
import
org.jvnet.hudson.test.MockAuthorizationStrategy
;
import
org.kohsuke.stapler.HttpResponses
;
import
java.io.IOException
;
...
...
@@ -49,6 +51,7 @@ public class StackTraceSuppressionTest {
@Before
public
void
setup
()
{
Jenkins
.
SHOW_STACK_TRACE
=
false
;
HttpResponses
.
SHOW_STACK_TRACE
=
false
;
}
@Test
...
...
@@ -83,36 +86,36 @@ public class StackTraceSuppressionTest {
assertThat
(
content
,
not
(
containsString
(
"Caused by"
)));
}
//
@Test
//
public void nonexistentAdjunct() throws Exception {
//
/* This test belongs in Stapler but it's easy to put it together here.
//
This test is based upon Stapler throwing an exception for this broken request.
//
If Stapler is improved to better handle this error, this test may erroneously fail. */
//
JenkinsRule.WebClient wc = j.createWebClient();
//
//
wc.setThrowExceptionOnFailingStatusCode(false);
//
HtmlPage page = wc.goTo("adjuncts/40331c1bldu3i%3b//'%3b//\"%3b//%25>%3f>uezm3<script>alert(1)</script>foo/org/kohsuke/stapler/jquery/jquery.full.js");
//
//
String content = page.getWebResponse().getContentAsString();
//
assertThat(content, containsString("No such adjunct found"));
//
assertThat(content, not(containsString("AdjunctManager.doDynamic")));
//
}
//
//
@Test
//
public void nonexistentAdjunctShowsTrace() throws Exception {
//
/* This test belongs in Stapler but it's easy to put it together here.
//
This test is based upon Stapler throwing an exception for this broken request.
//
If Stapler is improved to better handle this error, this test may erroneously fail. */
//
JenkinsRule.WebClient wc = j.createWebClient();
//
HttpResponses.SHOW_STACK_TRACE = true;
//
//
wc.setThrowExceptionOnFailingStatusCode(false);
//
Page page = wc.goTo("adjuncts/40331c1bldu3i%3b//'%3b//\"%3b//%25>%3f>uezm3<script>alert(1)</script>foo/org/kohsuke/stapler/jquery/jquery.full.js", "text/plain");
//
//
String content = page.getWebResponse().getContentAsString();
//
assertThat(content, containsString("No such adjunct found"));
//
assertThat(content, containsString("AdjunctManager.doDynamic"));
//
}
@Test
public
void
nonexistentAdjunct
()
throws
Exception
{
/* This test belongs in Stapler but it's easy to put it together here.
This test is based upon Stapler throwing an exception for this broken request.
If Stapler is improved to better handle this error, this test may erroneously fail. */
JenkinsRule
.
WebClient
wc
=
j
.
createWebClient
();
wc
.
setThrowExceptionOnFailingStatusCode
(
false
);
HtmlPage
page
=
wc
.
goTo
(
"adjuncts/40331c1bldu3i%3b//'%3b//\"%3b//%25>%3f>uezm3<script>alert(1)</script>foo/org/kohsuke/stapler/jquery/jquery.full.js"
);
String
content
=
page
.
getWebResponse
().
getContentAsString
();
assertThat
(
content
,
containsString
(
"No such adjunct found"
));
assertThat
(
content
,
not
(
containsString
(
"AdjunctManager.doDynamic"
)));
}
@Test
public
void
nonexistentAdjunctShowsTrace
()
throws
Exception
{
/* This test belongs in Stapler but it's easy to put it together here.
This test is based upon Stapler throwing an exception for this broken request.
If Stapler is improved to better handle this error, this test may erroneously fail. */
JenkinsRule
.
WebClient
wc
=
j
.
createWebClient
();
HttpResponses
.
SHOW_STACK_TRACE
=
true
;
wc
.
setThrowExceptionOnFailingStatusCode
(
false
);
Page
page
=
wc
.
goTo
(
"adjuncts/40331c1bldu3i%3b//'%3b//\"%3b//%25>%3f>uezm3<script>alert(1)</script>foo/org/kohsuke/stapler/jquery/jquery.full.js"
,
"text/plain"
);
String
content
=
page
.
getWebResponse
().
getContentAsString
();
assertThat
(
content
,
containsString
(
"No such adjunct found"
));
assertThat
(
content
,
containsString
(
"AdjunctManager.doDynamic"
));
}
@Test
public
void
exception
()
throws
Exception
{
...
...
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录