提交 · 1addc5d0feab0e77bb68e88fc74bb651e45cb462 · xxadev / jenkins

04 11月, 2015 2 次提交
- K
  Merge pull request #37 from jenkinsci-cert/SECURITY-214 · 1addc5d0
  由 Kohsuke Kawaguchi 提交于 11月 03, 2015
```
[SECURITY-214] OfflineCause.toString() is a string, not necessarily HTML
```
  1addc5d0
- K
  
  [SECURITY-214] OfflineCause.toString() is a string, not necessarily HTML · abe56149
  由 Kohsuke Kawaguchi 提交于 11月 03, 2015
  
  abe56149
29 10月, 2015 2 次提交
- J
  Merge pull request #23 from varmenise/security-186 · 5192c9e3
  由 Jesse Glick 提交于 10月 28, 2015
```
[SECURITY-186] check user permissions in Queue API
```
  5192c9e3
- J
  Merge pull request #34 from varmenise/security-184 · 2e439dc7
  由 Jesse Glick 提交于 10月 28, 2015
```
[SECURITY-184] fix test failures checking null value
```
  2e439dc7
15 10月, 2015 1 次提交
- V
  
  [SECURITY-184] fix test failures checking null value · d85bf665
  由 Valentina Armenise 提交于 10月 15, 2015
  
  d85bf665
13 10月, 2015 5 次提交
- V
  
  [SECURITY-186] check user permissions when calling QUEUE API · 581eb9ce
  由 Valentina Armenise 提交于 9月 04, 2015
  
  581eb9ce
- O
  
  [SECURITY-153] Hide references to inaccessible jobs in fingerprints. · 0594c4cb
  由 Oleg Nenashev 提交于 10月 06, 2015
  
  0594c4cb
- J
  Merge pull request #33 from jenkinsci-cert/SECURITY-200-1.580 · 234303da
  由 Jesse Glick 提交于 10月 12, 2015
```
[FIXED SECURITY-200] - Do not expose Api tokens to other users by default
```
  234303da
- J
  Merge pull request #29 from jenkinsci-cert/SECURITY-195-1.580 · e3ee6399
  由 Jesse Glick 提交于 10月 12, 2015
```
[SECURITY-195] - Prevent the folder escaping
```
  e3ee6399
- J
  Merge pull request #17 from varmenise/security-184 · 25360f54
  由 Jesse Glick 提交于 10月 12, 2015
```
[SECURITY-184] check secret-key in handshake
```
  25360f54
07 10月, 2015 2 次提交
- V
  
  [SECURITY-184] revised version of the orginal patch · ef64bb20
  由 varmenise 提交于 10月 07, 2015
  
  ef64bb20
- A
  
  [SECURITY-184]check secret-key in handshake · 91515d31
  由 akshayabd 提交于 4月 12, 2015
  
  91515d31
30 9月, 2015 4 次提交
- O
  [FIXED SECURITY-200] - Do not expose Api tokens to other users by default · b3f16489
  由 Oleg Nenashev 提交于 9月 29, 2015
```
System property can be used to restore the original behavior
```
  b3f16489
- O
  
  Fix comments from @jglick · 45d65c2f
  由 Oleg Nenashev 提交于 9月 29, 2015
  
  45d65c2f
- J
  Merge pull request #31 from jenkinsci-cert/SECURITY-192-1.580 · d9339644
  由 Jesse Glick 提交于 9月 29, 2015
```
[FIXED SECURITY-192] - Require Jenkins.READ permissions to access CLI pages
```
  d9339644
- O
  
  Annotate/document tests according to comments from @jglick · df36ef89
  由 Oleg Nenashev 提交于 9月 29, 2015
  
  df36ef89
29 9月, 2015 2 次提交
- O
  
  Remove the dead code · 672f8deb
  由 Oleg Nenashev 提交于 9月 29, 2015
  
  672f8deb
- O
  
  Update the unit test · 6ea45340
  由 Oleg Nenashev 提交于 9月 28, 2015
  
  6ea45340
25 9月, 2015 3 次提交
- V
  Merge pull request #25 from varmenise/security-173 · 553513a7
  由 valentina 提交于 9月 25, 2015
```
[SECURITY-173] use XMLUtils safe transformation to create a job from xml
```
  553513a7
- V
  
  [SECURITY-173] use XMlUtils safe transformation to create a job from xml · e78e9e81
  由 Valentina Armenise 提交于 9月 07, 2015
  
  e78e9e81
- O
  
  Restrict everything excepting the predefined list of entries. · ed0bfe30
  由 Oleg Nenashev 提交于 9月 25, 2015
  
  ed0bfe30
23 9月, 2015 1 次提交
- O
  
  [SECURITY-192] - Ensure that CLI can connect to CliAction without overall Jenkins.READ · 251bdb00
  由 Oleg Nenashev 提交于 9月 23, 2015
  
  251bdb00
22 9月, 2015 1 次提交
- O
  
  Fix the failing test (a new one for CLI access would be useful) · a41fcd56
  由 Oleg Nenashev 提交于 9月 21, 2015
  
  a41fcd56
21 9月, 2015 2 次提交
- O
  
  [FIXED SECURITY-192] - Require Jenkins.READ permissions to access CLI pages · 9e439d46
  由 Oleg Nenashev 提交于 9月 04, 2015
  
  9e439d46
- O
  
  Do not print stacktraces · ecab74af
  由 Oleg Nenashev 提交于 9月 21, 2015
  
  ecab74af
10 9月, 2015 4 次提交
- O
  
  Update the implementation and tests according to comments from @stephenc · f22db8a7
  由 Oleg Nenashev 提交于 9月 04, 2015
  
  f22db8a7
- O
  
  [SECURITY-195] - Throw the MalformedURLException if the request includes the relative addressing · 5431e397
  由 Oleg Nenashev 提交于 9月 04, 2015
  
  5431e397
- O
  
  [SECURITY-195] - Direct unit test for the issue · 1002ada4
  由 Oleg Nenashev 提交于 9月 04, 2015
  
  1002ada4
- O
  
  [SECURITY-169] - Convert crumb issuer salt to the confidential key · f53802bb
  由 Oleg Nenashev 提交于 9月 07, 2015
  
  f53802bb
18 3月, 2015 2 次提交
- J
  
  Merge branch 'security' into security-stable-1.580 · 9fd92363
  由 Jesse Glick 提交于 3月 17, 2015
  
  9fd92363
- O
  
  [SECURITY-180] fix test · 2cc3afde
  由 Oliver Gondža 提交于 3月 17, 2015
  
  2cc3afde
17 3月, 2015 6 次提交
- K
  
  Merge branch 'security' into security-stable-1.580 · c545777b
  由 Kohsuke Kawaguchi 提交于 3月 16, 2015
  
  c545777b
- K
  Merge pull request #14 from jenkinsci-cert/SECURITY-177 · 69908093
  由 Kohsuke Kawaguchi 提交于 3月 16, 2015
```
[SECURITY-177] Reflected XSS in AdjunctManager.doDynamic
```
  69908093
- K
  [SECURITY-177] · 73b53b23
  由 Kohsuke Kawaguchi 提交于 3月 16, 2015
```
Added a test case to cover bases
```
  73b53b23
- J
  Merge branch 'security' into security-stable-1.580 · 17800410
  由 Jesse Glick 提交于 3月 16, 2015
```
Conflicts:
	test/src/test/java/hudson/model/UserTest.java
```
  17800410
- K
  Merge pull request #15 from jenkinsci-cert/SECURITY-171 · f58ba6e7
  由 Kohsuke Kawaguchi 提交于 3月 16, 2015
```
[SECURITY-171] XSS in FormValidation._error(..., Throwable, ...)
```
  f58ba6e7
- K
  Merge pull request #13 from jenkinsci-cert/SECURITY-180 · 57e78880
  由 Kohsuke Kawaguchi 提交于 3月 16, 2015
```
[SECURITY-180] arbitrary API Token change/leak via changeToken
```
  57e78880
08 3月, 2015 3 次提交
- O
  
  [SECURITY-171] test · f880d8d2
  由 Oliver Gondža 提交于 3月 07, 2015
  
  f880d8d2
- O
  
  [SECURITY-180] Test · 25bf232c
  由 Oliver Gondža 提交于 3月 07, 2015
  
  25bf232c
- K
  
  [FIXED SECURITY-171] · feb2703a
  由 Kohsuke Kawaguchi 提交于 3月 07, 2015
  
  feb2703a

xxadev / jenkins 与 Fork 源项目一致

xxadev / jenkins
与 Fork 源项目一致