- 14 2月, 2013 10 次提交
-
-
由 Jesse Glick 提交于
(cherry picked from commit 20d628fa)
-
由 Jesse Glick 提交于
(cherry picked from commit b44df8b1) Conflicts: core/pom.xml
-
由 Jesse Glick 提交于
(cherry picked from commit 6d99c02b)
-
由 Jesse Glick 提交于
This patch makes standard post-build action refuse to let you configure a downstream project you cannot currently build. The one from parameterized-trigger will show an error in the configure screen but still lets you save the configuration; needs an analogous patch to that plugin. Does not yet protect against POSTing config.xml with the trigger. (cherry picked from commit 757bc8a5) Conflicts: core/src/main/java/hudson/model/Descriptor.java
-
由 Jesse Glick 提交于
- My second patch, with whitelisted XPath values and forbidden JSONP. - Disabling JSONP altogether for REST API (unless explicitly allowed). - Forbid primitive XPath result sets by default. - Refuse to serve _crumb=123456 as this could (very hypothetically) be exploited. (cherry picked from commit f4af9b1a) Conflicts: core/src/main/java/hudson/model/Api.java
-
由 Kohsuke Kawaguchi 提交于
(cherry picked from commit f8d2a0ba)
-
由 Jesse Glick 提交于
Require POST for various operations. (cherry picked from commit 36c86243) Conflicts: core/src/main/java/hudson/model/AbstractBuild.java
-
由 Jesse Glick 提交于
(cherry picked from commit 1fb2acfd) Conflicts: core/src/main/java/hudson/model/AbstractProject.java core/src/main/java/hudson/model/ParametersDefinitionProperty.java
-
由 Kohsuke Kawaguchi 提交于
- Use the proper block cipher mode. Or else the information about the plain text still ends up revealing as a pattern without the attacker knowing the key. - No need to hide SLAVE_SECRET from the encrypted payload. jnlpMac is needed to decrypt this payload to begin with, so there's no point in hiding it. This simplifies the code a little bit. - Using a newer slave installer that uses the -secret option (cherry picked from commit f4496df1)
-
由 Kohsuke Kawaguchi 提交于
Jesse's original patch (cherry picked from commit 01a24e2c)
-
- 12 2月, 2013 3 次提交
-
-
由 Kohsuke Kawaguchi 提交于
-
由 Kohsuke Kawaguchi 提交于
-
由 Kohsuke Kawaguchi 提交于
-
- 11 2月, 2013 4 次提交
-
-
由 Jesse Glick 提交于
-
由 Kohsuke Kawaguchi 提交于
-
由 Kohsuke Kawaguchi 提交于
-
由 Kohsuke Kawaguchi 提交于
-
- 09 2月, 2013 2 次提交
-
-
由 Jesse Glick 提交于
-
由 Jesse Glick 提交于
translation cleanup
-
- 08 2月, 2013 8 次提交
-
-
由 Harald Albers 提交于
purged duplicated translations for GlobalCrumbIssuerConfiguration ("Prevent Cross Site Request Forgery exploits"). Changed property name "Crumb" to "Crumbs" because this is the value that the existing translations actually use.
-
由 Christoph Kutzinski 提交于
-
由 Jesse Glick 提交于
Improve UpdateSiteTest by adding valid Update sites
-
由 Ryan Campbell 提交于
-
由 Nicolas De Loof 提交于
-
由 Jesse Glick 提交于
Removing old static field, which was not friendly to tests, especially multithreaded runners. Cleaned up existing tests to use updateDirectly rather than POSTing raw JSON.
-
由 Jesse Glick 提交于
-
由 Jesse Glick 提交于
-
- 07 2月, 2013 13 次提交
-
-
由 Jesse Glick 提交于
-
由 Jesse Glick 提交于
[JENKINS-15156] AbstractProject.builds accessed by Maven & matrix module builds before onLoad or onCreatedFromScratch called. Seem to need to keep the deprecated no-arg RunMap initializer though it is unclear to me how it could work.
-
由 Nicolas De Loof 提交于
so iterate on itemGroup.getItems and filter by job names
-
由 Nicolas De Loof 提交于
-
由 Nicolas De Loof 提交于
used to browse workspace and run scm polling
-
由 Jesse Glick 提交于
Seems that the RunMap must be initialized before updateTransientActions, which uses it, is called.
-
由 Jesse Glick 提交于
-
由 Jesse Glick 提交于
-
由 Jesse Glick 提交于
[FIXED JENKINS-15156] Initialize AbstractLazyLoadRunMap.dir for newly created jobs.
-
由 Johno Crawford 提交于
-
由 Johno Crawford 提交于
-
由 Jesse Glick 提交于
Correctly support direct updates of html update sites
-
由 Ryan Campbell 提交于
Correctly support direct updates of html update sites and other issues pointed out by jglick in https://github.com/jenkinsci/jenkins/pull/692
-