更新Jenkins安全设置

Question

我更新Jenkins安全设置以支持诱惑报告

System.setProperty(“hudson.model.DirectoryBrowserSupport.CSP", "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline';")

它工作正常，现在我需要添加

System.setProperty("hudson.model.DirectoryBrowserSupport.CSP", "sandbox allow-scripts;")

用于HTML报告

如何将两个设置合并为1？

谢谢，Mor

Answer 1

looks like this one

System.setProperty("hudson.model.DirectoryBrowserSupport.CSP", "default-src 'none'; img-src 'self'; style-src 'self'; child-src 'self'; frame-src 'self';")

do the trick