(cherry picked from commit 86af885a)

[JENKINS-62181] Deadlock during log formatting

(cherry picked from commit c2bd4fa0)

(cherry picked from commit 0a415906)

wtf are some people doing

(cherry picked from commit 60ecdee0)

This has changed maven coordinates to the jakarta project, though the
code is binary compatible still.

* [JENKINS-60866] Un-inline JavaScript from ReverseProxySetupMonitor

* Also un-inlining CSS

* Arrow to function

* Differentiate css-class and js-class

* The forgotten one

Jenkins bundled Bootstrap 3 grid uses untypical 24 columns
and is not compatible with new JS frameworks that are based
on BS4 and a 12 column grid.

Workaround for https://issues.jenkins-ci.org/browse/JENKINS-61326

Co-Authored-By: NFélix Queiruga <felix.queiruga@gmail.com>

Co-Authored-By: NDaniel Beck <1831569+daniel-beck@users.noreply.github.com>

This should avoid classloading issues I've seen, such as

Caused by: java.lang.NoClassDefFoundError:
javax/servlet/ServletException
  at hudson.util.ProcessTree.get(ProcessTree.java:432)
...

Co-Authored-By: NDaniel Beck <1831569+daniel-beck@users.noreply.github.com>

This will replace a rarely seen log message saying "not found" with
one that says "default: ... => null", but that seems OK.

* [JENKINS-61738] Session hijacking protection hardening

* Workaround bad test

* Better approach in terms of test

* Get rid of small whitespace

* Update core/src/main/java/hudson/WebAppMain.java
Co-Authored-By: NJeff Thompson <37345299+jeffret-b@users.noreply.github.com>

* Update war/src/main/webapp/WEB-INF/web.xml
Co-Authored-By: NJeff Thompson <37345299+jeffret-b@users.noreply.github.com>

* Use release companion PR
Co-authored-by: NJeff Thompson <37345299+jeffret-b@users.noreply.github.com>

* extracted duplicated code in method

* removed unnecessary assignments

* added back variable to reduce duplication and changed name of method
Co-authored-by: NHelen Spry <spry@Helens-MacBook-Pro.local>

* JENKINS-61812 Fix read only password

* Don't call getPasswordValue until later