Make sure LDAPAttribute gets rejected.

This basically is a convenient version of
https://github.com/jenkinsci-cert/SECURITY-218.

During the course of discussing how to fix SECURITY-360, it was agreed
by the CERT team that we provide this switch.

* Load i18n resource bundles from plugins if not found in jenkins core
Signed-off-by: NThorsten Scherler <scherler@gmail.com>

* Issue 404 response for missing i18n resource bundles

Currently issues a 200 with an "error" response payload. This change still issues the error response payload, but also sets the HTTP response.
Signed-off-by: NThorsten Scherler <scherler@gmail.com>

* [JENKINS-35845] Fix test since we return now a 404

* [JENKINS-35845] add test for getting locale from plugin. fix comments from oleg.

* [JENKINS-35845] Fix description

* [JENKINS-35845] Update PR with comments from Oleg

* [JENKINS-35845] Add feedback from tom

* eslint - formating changes and fix offences

* eslint - formating changes and fix offences

* [JENKINS-35845] remove code concerning 404 response. Fix resourceBundle test by prevent NPE to happen

* [JENKINS-35845] Link to issue on which we introduced the test

(cherry picked from commit ab16e525)

* [JENKINS-39465] - Tweak processing of enabled and disabled protocols in Jenkins instance

Due to whatever reason, without a definition of an array recipient field the data goes to the disk in the following way:

```
<enabledAgentProtocol>JNLP3-connect</enabledAgentProtocol>
<enabledAgentProtocol>JNLP4-connect</enabledAgentProtocol>
```

It is supposed to processed by Implicit array correctly, but it does not actually happen.
With a fix the data is being stored in another format:

```
  <enabledAgentProtocols>
    <string>JNLP3-connect</string>
    <string>JNLP4-connect</string>
  </enabledAgentProtocols>
```

This data now works correctly and gets deserialized correctly. readResolve() just adds a fallback for the case when Implicit array handling starts behaving correctly (?).

* [JENKINS-39465] - Add configuration roundtrip tests

* [JENKINS-39465] - Jenkins#agentProtocols cache must be invalidated when we reload the configuration

* [JENKINS-39465] - Remove obsolete comment from Tests

(cherry picked from commit 3e2e0171)

[FIXED JENKINS-38487] - Jenkins startup must not fail in the case of ComputerListener failure (#2610)

Without this code Jenkinbs startup fails if EnvInject fails to find global property file on startup.

Javadoc says "Exceptions will be recorded to the listener. Note that throwing an exception doesn't put the computer offline." regarding the listener method exception, hence we should not block Jenkins startup
(cherry picked from commit 58e1228c)

* [JENKINS-26940] Print message when installer isn't applicable

* [JENKINS-26940] Only print when none found, add test

(cherry picked from commit ae29e6b2)

* [FIX JENKINS-18114] Exclude /cli URL from crumb requirement

* [JENKINS-18114] Fix test: Don't send the crumb

The CLI doesn't do this either.

(cherry picked from commit de740c75)

* [JENKINS-36748] Add a test case and not process null specs

* [JENKINS-36748] Correct license and add a minor comment

* [JENKINS-36748] Add a Waning logger when spec is null

(cherry picked from commit 42788045)

[JENKINS-35493] Introduce a UserDetails cache
(cherry picked from commit 06e99bd9)

* [JENKINS-36908] Make sure that the All view is created

* Revert old All view behaviour

* Fix changed comment

* Tests

* Delete unwanted file.

(cherry picked from commit 404384ee)

* [JENKINS-36387] Catch exception when scm retry count field is empty.

* Add test for JENKINS-36387

* [JENKINS-36387] Move test in correct place

* [JENKINS-36387] Reproduce actuall behaviour

(cherry picked from commit 43942623)

(cherry picked from commit 8a330acc)

[JENKINS-36476] Underprivileged users could not use the default value of a password parameter (#2454)

* [FIXED JENKINS-36476] Do not even send the default password in encrypted form; leave the text field blank, and apply the default upon submission.

* [JENKINS-36476] Use a special token, not the empty string, as the marker for the default value.

(cherry picked from commit c31392d1)

Added a simple diagnostic HTTP response to the TcpSlaveAgentListener.

version

* Check that dependencies are enabled. A disabled optional dependency
  will not prevent a plugin from loading.
* Check versions of dependencies declared by a plugin before loading it.
  If any dependency (even optional) is older than what is required,
  then the plugin isn't loaded.

This should prevent use cases where a plugin is loaded but one of its
dependencies is too old so that :
* its @Extension annotated classes cannot be loaded, causing the full
  Jenkins to blow up with crapload of exceptions which are tedious to
  investigate to understand the root cause.
* NoSuchMethodError and the likes at runtime even though boot has
  completed.

Version check (for setups where version list is manually crafted but yet
works) can be disabled by starting Jenkins with

-Dhudson.PluginWrapper.dependenciesVersionCheck.enabled=true

Minor fixes done while implementing this change :
* Fix version parsing in PluginWrapper.Dependency
* Dynamic plugin load didn't check for disabled flag

* [JENKINS-36908] Make sure that the All view is created

* Revert old All view behaviour

* Fix changed comment

* Tests

* Delete unwanted file.

- We now check the format and assure that all detached plugins are reported

wait-node-online and wait-node-offline covered by test-cases

[FIXED JENKINS-27530] Jenkins.reload must also reload the Queue to ensure that every Queue.Item.task corresponds to a live Job, lest nextBuildNumber be bogus.
(cherry picked from commit 12fd3e47)

* [JENKINS-34468] CLI command offline-node extracted from core to CLI

offline-node extended to accept multiple node names
offline-node covered by test-cases

* Fixed translation properties

* Fixes based on Oleg's comments

* Fixed HelpCommandTest test-case

* Minor fixes

* Uses Matchers.instanceOf everywhere instead of Java operator instanceof

[JENKINS-36476] Underprivileged users could not use the default value of a password parameter (#2454)

* [FIXED JENKINS-36476] Do not even send the default password in encrypted form; leave the text field blank, and apply the default upon submission.

* [JENKINS-36476] Use a special token, not the empty string, as the marker for the default value.

* [JENKINS-36387] Catch exception when scm retry count field is empty.

* Add test for JENKINS-36387

* [JENKINS-36387] Move test in correct place

* [JENKINS-36387] Reproduce actuall behaviour

Setting autocomplete to "off" will tell browsers not to try to autofill
forms during history navigation. Since this seems to be a prominent
problem in Jenkins I feel it is best to have it default to "off" and let
individual inputs or pages opt-in to enable it instead
to indicate they can handle it.
The standard login page does not seem to use the taglib form tag
so it is not affected, even so, all modern browsers ignores
the autocomplete attribute on username and password fields anyway.

The test found out that RunMap's subMap implementation only returns loaded builds, so we needed to introduce a method to test if there was a specific run on the disk. For the weather reports we do not care if the record on the disk fails to load