Repository navigation
[JENKINS-60410] Suppress stack traces in core #20742
Description
I propose to move the capability from the Suppress Stack Trace Plugin into core and clean it up a little bit. The existing plugin behavior is to show the trace to administrators and to connect it to a specific log message for other users. I propose to retain this behavior.
Jenkins has seen a significant rise in security-conscious use since this plugin was created. Jenkins should be more secure by default. While showing the stack trace isn't a security vulnerability, not showing the trace is standard, expected industry behavior.
Originally reported by jthompson, imported from: Suppress stack traces in core
- assignee: jthompson
- status: Resolved
- priority: Minor
- component(s): core
- resolution: Fixed
- resolved: 2020-03-09T12:49:52+00:00
- votes: 1
- watchers: 3
- imported: 2025-11-24
Raw content of original issue
I propose to move the capability from the Suppress Stack Trace Plugin into core and clean it up a little bit. The existing plugin behavior is to show the trace to administrators and to connect it to a specific log message for other users. I propose to retain this behavior.
Jenkins has seen a significant rise in security-conscious use since this plugin was created. Jenkins should be more secure by default. While showing the stack trace isn't a security vulnerability, not showing the trace is standard, expected industry behavior.
Activity