> On 12.05.2016, at 10:48, 'Björn Pedersen' via Jenkins Developers > <[email protected]> wrote: > > Since sec-170 all unknown variables will get dropped. What needs to be done > in a plugin to correctly declare the vars they provide?
My blog post mentions a few options towards the end: https://jenkins.io/blog/2016/05/11/security-update/ Personally I'd prefer plugin developers use the second option -- often, what's passed as parameters aren't actually parameters per se, it probably just was the most straightforward way to implement it. -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/C68397EA-E59C-452C-B00D-3E299F0EC112%40beckweb.net. For more options, visit https://groups.google.com/d/optout.
