Branch: refs/heads/master
  Home:   https://github.com/jenkinsci/export-params-plugin
  Commit: 46bc32dce3475dd4523e1ab57bf2b675794ea324
      
https://github.com/jenkinsci/export-params-plugin/commit/46bc32dce3475dd4523e1ab57bf2b675794ea324
  Author: rinrinne <rinrin...@gmail.com>
  Date:   2016-07-26 (Tue, 26 Jul 2016)

  Changed paths:
    M src/main/java/org/jenkinsci/plugins/exportparams/filter/Filter.java
    M 
src/main/java/org/jenkinsci/plugins/exportparams/filter/PlainListFilter.java
    M src/main/java/org/jenkinsci/plugins/exportparams/filter/RegExpFilter.java

  Log Message:
  -----------
  Revert "Fix for SECURITY-170"

This reverts commit 5b2875f0e40e1b53469f99a056b8a216dd54ae05.


  Commit: 1697499956c155dc657b38331c203395cdec30d8
      
https://github.com/jenkinsci/export-params-plugin/commit/1697499956c155dc657b38331c203395cdec30d8
  Author: rinrinne <rinrin...@gmail.com>
  Date:   2016-07-26 (Tue, 26 Jul 2016)

  Changed paths:
    M README.md
    M 
src/main/java/org/jenkinsci/plugins/exportparams/ExportParametersBuilder.java
    A 
src/main/java/org/jenkinsci/plugins/exportparams/ExportParametersEnvironmentContributor.java
    A 
src/main/java/org/jenkinsci/plugins/exportparams/ExportParametersInvisibleAction.java

  Log Message:
  -----------
  Use EnvironmentContributor to fix SECURITY-170

This plugin provides 2 parameters, but those were unsafe.
This patch uses EnvironmentContributor to contribute
plugin specific parameters safely.

Exported parameters from this plugin are safe ones.
No unsafe parameters are not contributed to build
by default.

See this blog post:
https://jenkins.io/blog/2016/05/11/security-update/


Compare: 
https://github.com/jenkinsci/export-params-plugin/compare/5b2875f0e40e...1697499956c1

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-commits+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to