hudson.model.Hudson.help-markupFormatter.html Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of hudson-core Show documentation

Contains the core Hudson code and view files to render HTML.

The newest version!


    In such places as project description, user description, view description, and build description,
    Hudson allows users to enter some free-form text that describes something.

    This configuration determines how such free-form text is converted to HTML. By default, Hudson treats
    the text as HTML and use it as-is unmodified (and this is default mainly because of the backward compatibility.)

    
    While this is convenient and people often use it to load <iframe>, <script>. and so on to
    mash up data from other sources, this capability enables malicious users to mount
    XSS attacks.
    If the risk outweighs the benefit, install additional markup formatter plugins and use them.