[JIRA] [git-plugin] (JENKINS-34350) CSRF breaks generic polling skipper /git/notifyCommit?url=

[mark.earl.wa...@gmail.com (JIRA)]

Title: Message Title

Mark Waite commented on JENKINS-34350   Re: CSRF breaks generic polling skipper /git/notifyCommit?url=""> I don't see any failure related to honoring http requests submitted to Jenkins through http://debian8.markwaite.net:8080/git/notifyCommit?url=""> . The fix seems simple enough, but I'd really like to see the code fail before I apply a fix. Steps I used to try to duplicate the problem: Run jenkins 2.0 from docker commit e77dae5 Unable to find source-code formatter for language: bash. Available languages are: actionscript, html, java, _javascript_, none, sql, xhtml, xml docker run -p 8080:8080 -p 50000:50000 jenkins Install only the git plugin (assuming other plugins might inadvertently provide a CrumbExclusion) Configure a job which uses a git repo and polls SCM with no schedule Use curl to "prod" that server curl -s http://debian8.markwaite.net:8080/git/notifyCommit?url=""> When I do that, the job is consistently started the first time (no build available), and on each change that I make to the test repository after I run that curl command. As far as I can tell, CSRF for the git/notfiyCommit is already excluded for Jenkins 2.0. Add Comment   This message was sent by Atlassian JIRA (v6.4.2#64017-sha1:e244265) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.