Wadeck Follonier

[JENKINS-60866][PoC] Content-Security-Policy

3

**Not intented to be merged at any time.** ### Objective of this PR Letting you test the **CSP protection**, activated for a single page in Jenkins. More information about the...

[JENKINS-62448] Enhance information displayed in approval page

27

See [JENKINS-62448](https://issues.jenkins-ci.org/browse/JENKINS-62448). With this PR, we are storing more information than before. The change is incremental, it means that if you have some hashes already approved, they will just not...

[JENKINS-69869] Categorize the user properties

7

See [JENKINS-69869](https://issues.jenkins.io/browse/JENKINS-69869). This PR is a proposal to categorize the user properties. It follows the same idea as with the Global configuration pages. ⚠️ Originally I was working on [JENKINS-69853](https://issues.jenkins.io/browse/JENKINS-69853)...

Adding details about CVEs in third party dependencies

5

As the reporting of CVEs is a recurrent topic within the security team, I would like to clarify our standpoint.

Find a way to avoid non-expirable access for the update center certificate

1

### Service(s) trusted.ci.jenkins.io, Update center ### Summary **References:** - https://github.com/jenkins-infra/helpdesk/issues/3489 - https://github.com/jenkins-infra/update-center2/tree/master/resources/certificates#key-owners **Context:** - The private key allowing someone to generate a valid certificate for updateCenter validity is accessible by...