Git Product home page Git Product logo

antisamy-markup-formatter-plugin's Introduction

OWASP Markup Formatter Plugin

This plugin is also known as "Safe HTML" Plugin and antisamy-markup-formatter.

Note
The plugin manager contains a slightly misleading warning: While there is no "different settings format", OWASP Markup Formatter Plugin 2.0 reduced the set of allowed elements. Previously defined descriptions may no longer look the same. The plugin can be freely upgraded to 2.0 or downgraded again to 1.8, if necessary.

About

This plugin allows formatting descriptions of jobs, builds, views, etc. in Jenkins using a safe subset of HTML.

This plugin sanitizes HTML sources using the OWASP Java HTML Sanitizer and a basic policy allowing limited HTML markup in user-submitted text.

Installation

This plugin is usually installed because it’s a suggested plugin in the setup wizard; Administrators installing the default set of plugins will also install this plugin that way.

It is also bundled in the jenkins.war and will automatically installed as a dependency of plugins with very old (1.553 or older) Jenkins core dependencies.

Configuration

Once the plugin is installed, go to Manage Jenkins → Configure Global Security → Markup Formatter. Select Safe HTML for the Markup Formatter option.

User-submitted text, like build, job, and view descriptions, will then support HTML formatting, but will be sanitized by removing potentially dangerous elements.

About Internal Names

Both the file name antisamy-markup-formatter.hpi and the class name RawHtmlMarkupFormatter are misleading: Neither describes the current behavior of the plugin; both names are used for historical reasons only.

antisamy-markup-formatter-plugin's People

Contributors

albers avatar alecharp avatar armfergom avatar basil avatar batmat avatar christ66 avatar daniel-beck avatar dependabot[bot] avatar jetersen avatar jglick avatar jtnord avatar markewaite avatar mramonleon avatar olivergondza avatar recena avatar ringerc avatar rsandell avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.