Which html is supported in Jenkins job description

Question

In the Job description you can use Html tags. I have something like:

blabla.. on <a href="http://vms029/wa_shdw" target="_blank">http://vms029/wa_shdw</a> 

But the target="_blank" seems to get scrubbed somewhere. Is there another way? Any doc on whats supported and what's not?

Answer 1

Jenkins allows you to use various markup languages to write job descriptions; plugins can define how the description should be parsed via the MarkupFormatter interface.

By default, the RawHtmlMarkupFormatter is used, which applies an HTML sanitisation policy (from the OWASP AntiSamy Project) — the Myspace policy.

In the Myspace policy, you'll see that only certain tags and attributes are allowed. target isn't one of them, which is why you see it being stripped from your input.

For your use case, the alternatives are to install and configure another markup formatter plugin, or to write your own. Some examples include:

• Escaped Markup Plugin: escapes all HTML tags (probably not so useful for you)
• "Anything Goes" Formatter: allows any HTML input at all (with the associated security risks)
• PegDown Formatter Plugin: lets you write your descriptions in Markdown (probably the nicest option here, but likely doesn't support things like target="_blank")