Sync changes from jenkinsci/testcomplete-plugin

docs/README.md

@@ -83,6 +83,12 @@ If you have any questions or need assistance with setting up the plugin and conf
 #### Version 2.9,1
 -   Fix security issue SECURITY-2741 / CVE-2023-24443 where TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
 
+#### Version 2.9.2
+-   Fix Stored XSS vulnerability (SECURITY-2892 / CVE-2023-33002)
+
+#### Version 2.9.1
+-   Fix XXE vulnerability (SECURITY-2741 / CVE-2023-24443)
+
 #### Version 2.6.2
 -   Support for the TestExecute Lite utility has been removed. Now you can control parallel test runs directly from TestComplete projects.
 

pom.xml

@@ -3,7 +3,7 @@
   <parent>
     <groupId>org.jenkins-ci.plugins</groupId>
     <artifactId>plugin</artifactId>
-    <version>4.59</version>
+    <version>4.65</version>
   </parent>
 
   <properties>
@@ -13,7 +13,7 @@
 
   <artifactId>TestComplete</artifactId>
   <name>TestComplete support plug-in</name>
-  <version>2.10-SNAPSHOT</version>
+  <version>2.12-SNAPSHOT</version>
 
   <packaging>hpi</packaging>
   <url>https://github.com/jenkinsci/testcomplete-plugin/blob/master/docs/README.md</url>
@@ -59,7 +59,7 @@
           <dependency>
               <groupId>io.jenkins.tools.bom</groupId>
               <artifactId>bom-2.361.x</artifactId>
-              <version>2025.v816d28f1e04f</version>
+              <version>2102.v854b_fec19c92</version>
               <scope>import</scope>
               <type>pom</type>
           </dependency>
@@ -70,7 +70,7 @@
     <connection>scm:git:https://github.com/jenkinsci/testcomplete-plugin.git</connection>
     <developerConnection>scm:git:git@github.com:jenkinsci/testcomplete-plugin.git</developerConnection>
     <url>https://github.com/jenkinsci/testcomplete-plugin</url>
-    <tag>TestComplete-2.9.1</tag>
+    <tag>TestComplete-2.10</tag>
   </scm>
 
   <pluginRepositories>

src/main/resources/com/smartbear/jenkins/plugins/testcomplete/TcReportAction/index.jelly

@@ -1,4 +1,4 @@
-<?jelly escape-by-default='false'?>
+<?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
 
     <l:layout title="${%PageTitle}">
@@ -29,7 +29,9 @@
             </j:if>
 
             <j:if test="${!it.hasInfo()}">
-                <span style="color:red;">${it.getNoInfoMessage("../../../console")}</span>
+                <span style="color:red;">
+                    <j:out value='${it.getNoInfoMessage("../../../console")}' />
+                </span>
                 <br/><br/>
             </j:if>
 

src/main/resources/com/smartbear/jenkins/plugins/testcomplete/TcSummaryAction/index.jelly

@@ -1,4 +1,4 @@
-<?jelly escape-by-default='false'?>
+<?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
     <l:layout title="${%PageTitle}">
 

src/main/resources/com/smartbear/jenkins/plugins/testcomplete/TcTestBuilder/config.jelly

@@ -1,4 +1,4 @@
-<?jelly escape-by-default='false'?>
+<?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form" xmlns:c="/lib/credentials" >
 
   <f:block>

src/main/resources/index.jelly

@@ -1,4 +1,4 @@
-<?jelly escape-by-default='false'?>
+<?jelly escape-by-default='true'?>
 <div>
   Runs automated tests with TestComplete or TestExecute from Jenkins.
 </div>