stable

Clone or download

Read-only

request #10892: Continuous integration plugins support CSRF protection of Jenkins

Jobs on a Jenkins instance with the CSRF protection enabled can be triggered. Interactions with a Jenkins instance that does not have the CSRF protection enabled are not impacted by this contribution and still work as before. Change-Id: I40472e682c0c2f90ec8ba60366e57692fa5ae845

Modified Files

Name
M plugins/git/hooks/post-receive.php +3 −1 Go to diff View file
M plugins/hudson_git/include/HudsonGit/Hook/JenkinsClient.php +18 −6 Go to diff View file
M plugins/hudson_git/include/hudson_gitPlugin.class.php +4 −2 Go to diff View file
M plugins/hudson_svn/include/hudson_svnPlugin.class.php +4 −2 Go to diff View file
M plugins/tracker/include/workflow/PostAction/CIBuild/Transition_PostAction_CIBuildFactory.class.php +7 −6 Go to diff View file
M src/common/Jenkins/Client.class.php +28 −7 Go to diff View file
A src/common/Jenkins/JenkinsCSRFCrumbRetriever.php +60 −0 Go to diff View file
M src/common/autoload.php +3 −2 Go to diff View file
M tests/simpletest/common/Jenkins/ClientTest.php +9 −3 Go to diff View file
A tests/simpletest/common/Jenkins/JenkinsCSRFCrumbRetrieverTest.php +51 −0 Go to diff View file