[JIRA] (JENKINS-59056) Report displays raw HTML if CDATA terms are used

[imoutsat...@msn.com (JIRA)]

Title: Message Title

Ioannis Moutsatsos edited a comment on JENKINS-59056   Re: Report displays raw HTML if CDATA terms are used After some investigation and head-banging I came across what seems to be the exact cause of this bug: [https://wiki.jenkins.io/display/JENKINS/Plugins+affected+by+2018-10-10+Stapler+security+hardening] The Summary Display Plugin is specifically listed and the 'impact/behavior' is listed as 'Raw HTML is shown if CDATA terms are used'   They also claim that 'We expect that (affected) plugins will adapt pretty quickly to this change, as the fix is typically straightforward.' Finally a workaround is offered, which I'm using until the plugin is fixed. See [https://jenkins.io/doc/upgrade-guide/2.138/#security-hardening-to-prevent-xss-vulnerabilities] Add Comment   This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.201412.1566489784000.8954.1566591720057%40Atlassian.JIRA.