fix csrf error for actions in the node's monitoring page, but respons…

…e messages are still not displayed (gc, heap dump and when memory histogram is not supported)

src/main/java/org/jvnet/hudson/plugins/monitoring/NodeMonitoringAction.java

@@ -17,9 +17,13 @@
  */
 package org.jvnet.hudson.plugins.monitoring;
 
+import org.kohsuke.stapler.Stapler;
+
 import hudson.model.Action;
 import hudson.model.Computer;
 import jenkins.model.Jenkins;
+import net.bull.javamelody.SessionListener;
+import net.bull.javamelody.internal.web.html.HtmlAbstractReport;
 
 /**
  * Implements a "Monitoring" button for slaves.
@@ -80,6 +84,20 @@ public String getMonitoringUrl() {
 		return "../../../../monitoring" + urlSuffix;
 	}
 
+	/**
+	 * Si la protection csrf est activée dans Jenkins (ce qui est le cas par défaut),
+	 * retourne la partie de l'url avec le token csrf de javamelody.
+	 * @return String
+	 */
+	public String getCsrfTokenUrlPart() {
+		try {
+			SessionListener.bindSession(Stapler.getCurrentRequest().getSession(false));
+			return HtmlAbstractReport.getCsrfTokenUrlPart().replace("&", "&");
+		} finally {
+			SessionListener.unbindSession();
+		}
+	}
+
 	/**
 	 * Checks that user has access permissions to the monitoring page.
 	 * By default, requires global Administer or SystemRead permissions.

src/main/resources/org/jvnet/hudson/plugins/monitoring/NodeMonitoringAction/index.jelly

@@ -89,12 +89,12 @@
 	            <h2>${%System actions}</h2>
 	            <table style="padding-left: 2em;" id="management-actions">
 	                <local:feature icon="${it.monitoringUrl}?resource=broom.png" 
-	                               href="${it.monitoringUrl}?action=gc" 
+	                               href="${it.monitoringUrl}?action=gc${it.csrfTokenUrlPart}" 
 	                               title="${%Execute the garbage collector}">
 	                    ${%Runs the garbage collector on the node}
 	                </local:feature>
 	                <local:feature icon="${it.monitoringUrl}?resource=heapdump.png" 
-	                             href="${it.monitoringUrl}?action=heap_dump" 
+	                             href="${it.monitoringUrl}?action=heap_dump${it.csrfTokenUrlPart}" 
 	                             title="${%Generate a heap dump}">
 	                    <b style="color:orange">${%Warning!}</b> ${%This operation may affect performance of the node}
 	                </local:feature>