[JENKINS-71054] [core] CSP compatibility: lib/hudson/artifactList.jelly

<p>lib/hudson/artifactList.jelly has inline JavaScript.</p>

<h4><a name="Culprit"></a>Culprit</h4>
<ul>
	<li><a href="https://github.com/jenkinsci/jenkins/blob/5144035e5503591e57d27b45f4114706d96d1c7a/core/src/main/resources/lib/hudson/artifactList.jelly#L86-L88" class="external-link" target="_blank" rel="nofollow noopener">lib/hudson/artifactList.jelly#L86-L88</a></li>
	<li><a href="https://github.com/jenkinsci/jenkins/blob/5144035e5503591e57d27b45f4114706d96d1c7a/core/src/main/resources/lib/hudson/artifactList.jelly#L91-L108" class="external-link" target="_blank" rel="nofollow noopener">lib/hudson/artifactList.jelly#L91-L108</a></li>
</ul>


<h4><a name="Proposal"></a>Proposal</h4>
<p><a href="https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers" class="external-link" target="_blank" rel="nofollow noopener">https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers</a><br/>
<a href="https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks" class="external-link" target="_blank" rel="nofollow noopener">https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks</a></p>

---
<details><summary><i>Originally reported by <img align="left" width="20" src="https://raw.githubusercontent.com/jenkinsci/artifacts-from-jira-issues/refs/heads/main/avatars/kevingrdj.png" title="kevingrdj's avatar" /> <a href="https://issues.jenkins.io/secure/ViewProfile.jspa?name=kevingrdj">kevingrdj</a>, imported from: <a class="no-jira-link-rewrite" href="https://issues.jenkins.io/browse/JENKINS-71054" target="_blank">[core] CSP compatibility: lib/hudson/artifactList.jelly</a></i></summary>
<i><ul>
<li><b>assignee</b>: <a href="https://issues.jenkins.io/secure/ViewProfile.jspa?name=yafenkin">yafenkin</a>
<li><b>status</b>: Closed
<li><b>priority</b>: Minor
<li><b>component(s)</b>: core
<li><b>label(s)</b>: CSP
<li><b>resolution</b>: Fixed
<li><b>resolved</b>: 2023-07-29T14:41:30+00:00
<li><b>votes</b>: 0
<li><b>watchers</b>: 2
<li><b>imported</b>: 2025-11-24
</ul></i>
<details><summary>Raw content of original issue</summary>

<pre>
<p>lib/hudson/artifactList.jelly has inline JavaScript.</p>

<h4><a name="Culprit"></a>Culprit</h4>
<ul>
	<li><a href="https://github.com/jenkinsci/jenkins/blob/5144035e5503591e57d27b45f4114706d96d1c7a/core/src/main/resources/lib/hudson/artifactList.jelly#L86-L88" class="external-link" target="_blank" rel="nofollow noopener">lib/hudson/artifactList.jelly#L86-L88</a></li>
	<li><a href="https://github.com/jenkinsci/jenkins/blob/5144035e5503591e57d27b45f4114706d96d1c7a/core/src/main/resources/lib/hudson/artifactList.jelly#L91-L108" class="external-link" target="_blank" rel="nofollow noopener">lib/hudson/artifactList.jelly#L91-L108</a></li>
</ul>


<h4><a name="Proposal"></a>Proposal</h4>
<p><a href="https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers" class="external-link" target="_blank" rel="nofollow noopener">https://www.jenkins.io/doc/developer/security/csp/#inline-event-handlers</a>
<a href="https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks" class="external-link" target="_blank" rel="nofollow noopener">https://www.jenkins.io/doc/developer/security/csp/#inline-javascript-blocks</a></p></pre>
</details>
</details>

Navigation Menu

Repository navigation

[JENKINS-71054] [core] CSP compatibility: lib/hudson/artifactList.jelly #18599

Culprit

Proposal

Culprit

Proposal

No activity

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

[JENKINS-71054] [core] CSP compatibility: lib/hudson/artifactList.jelly #18599

Description

Culprit

Proposal

Culprit

Proposal

No activity

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions