-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 9.6.15
-
Component/s: Notifications
-
None
-
1
-
Severity 3 - Minor
-
3
Issue Summary
Bamboo variables can no longer be used in Webhook notification URL due to a validation failure which errors with URL is invalid.
Steps to Reproduce
- Plan Configuration >> Notifications >> Add >> Webhook
- Include a Bamboo variable in the URL e.g. https://api.github.com/repos/<github-username>/<github-reponame>/statuses/${bamboo.planRepository.revision}
- Save
Expected Results
Webhook notification saves
Actual Results
URL is invalid error is displayed
Workaround
Workaround 1
The URL validation can be disabled but it comes with increased security risk as you're also disabling an XSS check.
Evaluate whether you want to or are able to use the workaround to disable URL validation which would enable a potential XSS in the Webhook notification URL that allows a user with edit plan permission to inject malicious code into that field.
-Dbamboo.notifications.webhook.url.xss.check=false
Workaround 2
Only applicable if the Bamboo variable you're trying to use is for the GitHub build status API. If so, please consider upgrading to Bamboo 10 which has native GitHub build status integration:
- mentioned in
-
Page Loading...