[JIRA] (JENKINS-61952) Matcher.find() and Matcher.group(String) are no longer whitelisted

2020-04-17 Thread dnusb...@cloudbees.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Devin Nusbaum created an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-61952  
 
 
  Matcher.find() and Matcher.group(String) are no longer whitelisted   
 

  
 
 
 
 

 
Issue Type: 
  Bug  
 
 
Assignee: 
 Unassigned  
 
 
Components: 
 script-security-plugin  
 
 
Created: 
 2020-04-17 19:08  
 
 
Environment: 
 Jenkins ver. 2.204.2  script-security-plugin 1.68  
 
 
Priority: 
  Minor  
 
 
Reporter: 
 Devin Nusbaum  
 

  
 
 
 
 

 
 We have upgraded the plugin from 1.66 -> 1.68 Since version 1.68 method java.util.regex.Matcher find is not longer whitelisted: https://github.com/jenkinsci/script-security-plugin/commit/d5e107b1bd780314bc13ebed401ab3b8a22ec9a4#diff-bd6a93804fc62863a4d7460e35733302 Was this made on purpose or all mentioned methods were removed by accident? 

 

method java.util.regex.Matcher find
method java.util.regex.Matcher group java.lang.String
 

   We had to manually approve mentioned methods on our production servers. Could you please add mentioned methods to default approve list?  
 

  
 
 
 
 

 
 
 

  

[JIRA] (JENKINS-61952) Matcher.find() and Matcher.group(String) are no longer whitelisted

2020-04-17 Thread dnusb...@cloudbees.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Devin Nusbaum updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-61952  
 
 
  Matcher.find() and Matcher.group(String) are no longer whitelisted   
 

  
 
 
 
 

 
Change By: 
 Devin Nusbaum  
 

  
 
 
 
 

 
 Originally reported by [~wolniewicz] in JENKINS-61575, but that issue appears to be broken so I cloned it here. We have upgraded the plugin from 1.66 -> 1.68 Since version 1.68 method java.util.regex.Matcher find is not longer whitelisted:[https://github.com/jenkinsci/script-security-plugin/commit/d5e107b1bd780314bc13ebed401ab3b8a22ec9a4#diff-bd6a93804fc62863a4d7460e35733302]Was this made on purpose or all mentioned methods were removed by accident?{code:java}method java.util.regex.Matcher findmethod java.util.regex.Matcher group java.lang.String{code} We had to manually approve mentioned methods on our production servers.Could you please add mentioned methods to default approve list?  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Jenk

[JIRA] (JENKINS-61952) Matcher.find() and Matcher.group(String) are no longer whitelisted

2020-04-17 Thread dnusb...@cloudbees.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Devin Nusbaum updated  JENKINS-61952  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-61952  
 
 
  Matcher.find() and Matcher.group(String) are no longer whitelisted   
 

  
 
 
 
 

 
Change By: 
 Devin Nusbaum  
 
 
Status: 
 In  Progress  Review  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.205833.1587150538000.13288.1587151020306%40Atlassian.JIRA.


[JIRA] (JENKINS-61952) Matcher.find() and Matcher.group(String) are no longer whitelisted

2020-04-17 Thread dnusb...@cloudbees.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Devin Nusbaum started work on  JENKINS-61952  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
Change By: 
 Devin Nusbaum  
 
 
Status: 
 Open In Progress  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.205833.1587150538000.13287.1587151020294%40Atlassian.JIRA.


[JIRA] (JENKINS-61952) Matcher.find() and Matcher.group(String) are no longer whitelisted

2020-04-17 Thread dnusb...@cloudbees.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Devin Nusbaum assigned an issue to Devin Nusbaum  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-61952  
 
 
  Matcher.find() and Matcher.group(String) are no longer whitelisted   
 

  
 
 
 
 

 
Change By: 
 Devin Nusbaum  
 
 
Assignee: 
 Devin Nusbaum  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.205833.1587150538000.13286.1587151020177%40Atlassian.JIRA.


[JIRA] (JENKINS-61952) Matcher.find() and Matcher.group(String) are no longer whitelisted

2020-04-20 Thread dnusb...@cloudbees.com (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Devin Nusbaum updated  JENKINS-61952  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Jenkins /  JENKINS-61952  
 
 
  Matcher.find() and Matcher.group(String) are no longer whitelisted   
 

  
 
 
 
 

 
Change By: 
 Devin Nusbaum  
 
 
Status: 
 In Review Fixed but Unreleased  
 
 
Resolution: 
 Fixed  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Jenkins Issues" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.205833.1587150538000.14057.1587391020545%40Atlassian.JIRA.