{ "_class" : "org.jenkinsci.plugins.workflow.job.WorkflowRun", "actions" : [ { "_class" : "hudson.model.ParametersAction", "parameters" : [ { "_class" : "hudson.model.BooleanParameterValue", "name" : "SKIP_TEST", "value" : False }, { "_class" : "hudson.model.BooleanParameterValue", "name" : "SKIP_QUALITY", "value" : False } ] }, { "_class" : "hudson.model.CauseAction", "causes" : [ { "_class" : "hudson.model.Cause$UserIdCause", "shortDescription" : "Démarré par l'utilisateur Miguel Moquillon", "userId" : "mmoquillon", "userName" : "Miguel Moquillon" } ] }, { "_class" : "org.jenkinsci.plugins.workflow.libs.LibrariesAction" }, { }, { "_class" : "org.jenkinsci.plugins.workflow.cps.EnvActionImpl" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "b3a0a7bf423a3407c3bc6980f30a0c6ee678b5ae", "branch" : [ { "SHA1" : "b3a0a7bf423a3407c3bc6980f30a0c6ee678b5ae", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "b3a0a7bf423a3407c3bc6980f30a0c6ee678b5ae", "branch" : [ { "SHA1" : "b3a0a7bf423a3407c3bc6980f30a0c6ee678b5ae", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "b3a0a7bf423a3407c3bc6980f30a0c6ee678b5ae", "branch" : [ { "SHA1" : "b3a0a7bf423a3407c3bc6980f30a0c6ee678b5ae", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Jenkins-Pipelines.git" ], "scmName" : "" }, { }, { }, { }, { }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/sonarqube" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 261, "buildResult" : None, "marked" : { "SHA1" : "96a3a41e61a0a59a294dd74fce10884c559e77f4", "branch" : [ { "SHA1" : "96a3a41e61a0a59a294dd74fce10884c559e77f4", "name" : "refs/remotes/origin/sonarqube" } ] }, "revision" : { "SHA1" : "96a3a41e61a0a59a294dd74fce10884c559e77f4", "branch" : [ { "SHA1" : "96a3a41e61a0a59a294dd74fce10884c559e77f4", "name" : "refs/remotes/origin/sonarqube" } ] } }, "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "ff9903432f6445500447bed914a01e155efc5353", "branch" : [ { "SHA1" : "ff9903432f6445500447bed914a01e155efc5353", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "ff9903432f6445500447bed914a01e155efc5353", "branch" : [ { "SHA1" : "ff9903432f6445500447bed914a01e155efc5353", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "ff9903432f6445500447bed914a01e155efc5353", "branch" : [ { "SHA1" : "ff9903432f6445500447bed914a01e155efc5353", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Core" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "da97a0aafea25b96dbdb5a8fa0979e7f48773132", "branch" : [ { "SHA1" : "da97a0aafea25b96dbdb5a8fa0979e7f48773132", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "da97a0aafea25b96dbdb5a8fa0979e7f48773132", "branch" : [ { "SHA1" : "da97a0aafea25b96dbdb5a8fa0979e7f48773132", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "da97a0aafea25b96dbdb5a8fa0979e7f48773132", "branch" : [ { "SHA1" : "da97a0aafea25b96dbdb5a8fa0979e7f48773132", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Components" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "2af94364967e82de1e8d70f466e8367b04421688", "branch" : [ { "SHA1" : "2af94364967e82de1e8d70f466e8367b04421688", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "2af94364967e82de1e8d70f466e8367b04421688", "branch" : [ { "SHA1" : "2af94364967e82de1e8d70f466e8367b04421688", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "2af94364967e82de1e8d70f466e8367b04421688", "branch" : [ { "SHA1" : "2af94364967e82de1e8d70f466e8367b04421688", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Looks" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "ed6bdc22b8581b07c1e09d74558a2feb664e126b", "branch" : [ { "SHA1" : "ed6bdc22b8581b07c1e09d74558a2feb664e126b", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "ed6bdc22b8581b07c1e09d74558a2feb664e126b", "branch" : [ { "SHA1" : "ed6bdc22b8581b07c1e09d74558a2feb664e126b", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "ed6bdc22b8581b07c1e09d74558a2feb664e126b", "branch" : [ { "SHA1" : "ed6bdc22b8581b07c1e09d74558a2feb664e126b", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Setup" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbc", "branch" : [ { "SHA1" : "c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbc", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbc", "branch" : [ { "SHA1" : "c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbc", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbc", "branch" : [ { "SHA1" : "c0a46ddd25bbd81d0e4dbafd3051c0dc5be1ebbc", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Distribution" ], "scmName" : "" }, { "_class" : "hudson.plugins.git.util.BuildData", "buildsByBranchName" : { "refs/remotes/origin/master" : { "_class" : "hudson.plugins.git.util.Build", "buildNumber" : 1150, "buildResult" : None, "marked" : { "SHA1" : "0ff3db7ef2fa887e276200aea5587cde84dd56bd", "branch" : [ { "SHA1" : "0ff3db7ef2fa887e276200aea5587cde84dd56bd", "name" : "refs/remotes/origin/master" } ] }, "revision" : { "SHA1" : "0ff3db7ef2fa887e276200aea5587cde84dd56bd", "branch" : [ { "SHA1" : "0ff3db7ef2fa887e276200aea5587cde84dd56bd", "name" : "refs/remotes/origin/master" } ] } } }, "lastBuiltRevision" : { "SHA1" : "0ff3db7ef2fa887e276200aea5587cde84dd56bd", "branch" : [ { "SHA1" : "0ff3db7ef2fa887e276200aea5587cde84dd56bd", "name" : "refs/remotes/origin/master" } ] }, "remoteUrls" : [ "https://github.com/Silverpeas/Silverpeas-Assembly" ], "scmName" : "" }, { }, { "_class" : "hudson.plugins.sonar.action.SonarAnalysisAction", "ceTaskId" : "AaCfaNoDXgE6qZtOJxDE", "credentialsId" : None, "installationName" : "Silverpeas SonarCloud", "installationUrl" : "https://sonarcloud.io", "new" : True, "serverUrl" : "https://sonarcloud.io", "skipped" : False, "sonarqubeDashboardUrl" : "https://sonarcloud.io/dashboard?id=Silverpeas_Silverpeas-Core2&branch=master" }, { }, { }, { "_class" : "hudson.plugins.sonar.action.SonarAnalysisAction", "ceTaskId" : "AaCfihG-I3z4HI9aNq6z", "credentialsId" : None, "installationName" : "Silverpeas SonarCloud", "installationUrl" : "https://sonarcloud.io", "new" : True, "serverUrl" : "https://sonarcloud.io", "skipped" : False, "sonarqubeDashboardUrl" : "https://sonarcloud.io/dashboard?id=Silverpeas_Silverpeas-Components&branch=master" }, { }, { }, { }, { }, { }, { }, { }, { "_class" : "hudson.plugins.sonar.action.SonarBuildBadgeAction", "url" : None }, { }, { "_class" : "org.jenkinsci.plugins.displayurlapi.actions.RunDisplayAction" }, { "_class" : "org.jenkinsci.plugins.pipeline.modeldefinition.actions.RestartDeclarativePipelineAction" }, { }, { "_class" : "org.jenkinsci.plugins.workflow.job.views.FlowGraphAction" }, { }, { } ], "artifacts" : [ { "displayPath" : "build.yaml", "fileName" : "build.yaml", "relativePath" : "target/build.yaml" } ], "building" : False, "description" : None, "displayName" : "6.5-build260914", "duration" : 8956409, "estimatedDuration" : 6032580, "executor" : None, "fullDisplayName" : "Silverpeas_Master_AutoDeploy 6.5-build260914", "id" : "1150", "keepLog" : False, "number" : 1150, "queueId" : 59487, "result" : "SUCCESS", "timestamp" : 1789374846986, "url" : "https://integration.silverpeas.org/jenkins/job/Silverpeas_Master_AutoDeploy/1150/", "changeSets" : [ { "_class" : "hudson.plugins.git.GitChangeSetList", "items" : [ { "_class" : "hudson.plugins.git.GitChangeSet", "affectedPaths" : [ "core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java", "core-library/src/test/java/org/silverpeas/core/index/indexing/model/LastUpdateDateSearchTest.java", "core-web/src/test/resources/org/silverpeas/util/security.properties", "core-war/src/main/webapp/WEB-INF/tags/silverpeas/util/displayExternalIframe.tag", "core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.java", "core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java", "core-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.java", "core-web/src/integration-test/resources/org/silverpeas/util/security.properties", "core-configuration/src/main/config/properties/org/silverpeas/util/security.properties", "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java" ], "commitId" : "ff9903432f6445500447bed914a01e155efc5353", "timestamp" : 1789374831000, "author" : { "absoluteUrl" : "https://integration.silverpeas.org/jenkins/user/mmoquillon", "fullName" : "Miguel Moquillon" }, "authorEmail" : "miguel.moquillon@silverpeas.com", "comment" : "Fix bug #15431\u000a\u000aAllow iframes in the data sent to Silverpeas when they refer trusted sources\u000aMassiveWebSecurityFilter no longer blocks every iframe. An iframe is now allowed\u000aif its single src attribute refers either:\u000a- an HTTPS URL whose host is the Silverpeas server or one of the hosts set in\u000a the new security.external.iframe.hosts.allowed property, or\u000a- a relative URL within the Silverpeas application, without any path\u000a traversal attempt (even encoded).\u000aAny iframe that cannot be strictly parsed, or that has a srcdoc attribute,\u000ais still rejected.\u000aThe JSON bodies of requests are now decoded before the injection checks, so\u000athat they are done on the text as it will be taken by Silverpeas.\u000aThe iframe checking is done by the new IFrameChecker class, covered by unit\u000atests. MassiveWebSecurityFilterIT is also completed.\u000a", "date" : "2026-09-14 10:33:51 +0200", "id" : "ff9903432f6445500447bed914a01e155efc5353", "msg" : "Fix bug #15431", "paths" : [ { "editType" : "edit", "file" : "core-api/src/main/java/org/silverpeas/core/util/security/SecuritySettings.java" }, { "editType" : "edit", "file" : "core-war/src/main/webapp/WEB-INF/tags/silverpeas/util/displayExternalIframe.tag" }, { "editType" : "add", "file" : "core-web/src/main/java/org/silverpeas/core/web/filter/IFrameChecker.java" }, { "editType" : "edit", "file" : "core-web/src/integration-test/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilterIT.java" }, { "editType" : "edit", "file" : "core-web/src/test/resources/org/silverpeas/util/security.properties" }, { "editType" : "edit", "file" : "core-library/src/test/java/org/silverpeas/core/index/indexing/model/LastUpdateDateSearchTest.java" }, { "editType" : "edit", "file" : "core-web/src/integration-test/resources/org/silverpeas/util/security.properties" }, { "editType" : "add", "file" : "core-web/src/test/java/org/silverpeas/core/web/filter/IFrameCheckerTest.java" }, { "editType" : "edit", "file" : "core-configuration/src/main/config/properties/org/silverpeas/util/security.properties" }, { "editType" : "edit", "file" : "core-web/src/main/java/org/silverpeas/core/web/filter/MassiveWebSecurityFilter.java" } ] } ], "kind" : "git" } ], "culprits" : [ { "absoluteUrl" : "https://integration.silverpeas.org/jenkins/user/mmoquillon", "fullName" : "Miguel Moquillon" } ], "inProgress" : False, "nextBuild" : None, "previousBuild" : { "number" : 1149, "url" : "https://integration.silverpeas.org/jenkins/job/Silverpeas_Master_AutoDeploy/1149/" } }