You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Jenkins Developers
Good evening,
I am creating a class that extends ToolInstaller (say "widget tester"). I want a way to upload the tool I'm testing ("widget") directly by using a <input type="file" ..> rather than using "Download URL for binary archive"? We're doing this stuff in a disconnected environment.
Is there a way I can do this using Jelly? I'm building my installer class using "ToolInstaller"
Thanks!
Jesse Glick
unread,
Sep 25, 2020, 12:46:14 PM9/25/20
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Jenkins Dev
On Fri, Sep 25, 2020 at 2:06 AM Paul <paul...@gmail.com> wrote:
> Is there a way I can do this using Jelly?
Beware that there are a number of sorts of security vulnerabilities
you could introduce if you do not write this code very defensively. If
the tool is uploaded to the controller (Jenkins server), how does it
get to the agent where the build runs? Have you considered malicious
filenames? Etc.