fix Security-2865 / CVE-2022-43434

jenkinsci · Oct 28, 2022 · e0a7237 · e0a7237
1 parent 58f0e0e
commit e0a7237
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -68,6 +68,10 @@ This is a Jenkins Plugin to do security vulnerabilities scan on registries and l
 
 See [GitHub releases](https://github.com/jenkinsci/neuvector-vulnerability-scanner-plugin/releases)
 
+1.22 (Oct 28, 2022)
+-----
+* Fix Security-2865 / CVE-2022-43434 
+
 1.21 (Oct 25, 2022)
 -----
 * Fix Security-2865 / CVE-2022-43434

diff --git a/src/main/java/io/jenkins/plugins/neuvector/NeuVectorBuilder.java b/src/main/java/io/jenkins/plugins/neuvector/NeuVectorBuilder.java
@@ -206,9 +206,6 @@ public void perform(@Nonnull Run<?, ?> run, @Nonnull FilePath workspace, @Nonnul
         // init the logger
         this.logger = new Log(listener.getLogger());
 
-        // config the Jenkins CSP to allow the main panel to show html file
-        System.setProperty("hudson.model.DirectoryBrowserSupport.CSP", "default-src 'none'; style-src 'self'; img-src 'self';");
-
         // copy styles.css to workspace
         File cssFile;
         final EnvVars env = run.getEnvironment(listener);