CSRF protection in Jenkins - Mini Project: Build & Apply

CSRF Protection Configuration in Jenkins

📖 Scenario: You are a Jenkins administrator securing your Jenkins server. Cross-Site Request Forgery (CSRF) attacks can trick users into performing unwanted actions. Jenkins has a built-in CSRF protection feature that you need to enable and configure.

🎯 Goal: Enable and verify CSRF protection in Jenkins by configuring the appropriate settings in the Jenkins configuration file.

📋 What You'll Learn

Create a Jenkins configuration dictionary with CSRF protection settings

Add a variable to specify the CSRF crumb issuer class

Apply the CSRF protection configuration in the Jenkins config dictionary

Print the final Jenkins configuration to verify CSRF protection is enabled

💡 Why This Matters

🌍 Real World

CSRF protection is critical to prevent attackers from tricking Jenkins users into performing unwanted actions. Configuring it properly helps keep your CI/CD pipelines safe.

💼 Career

Jenkins administrators and DevOps engineers must know how to secure Jenkins servers, including enabling CSRF protection to comply with security best practices.

1

Create Jenkins configuration dictionary

Create a dictionary called jenkins_config with a key security set to an empty dictionary.

Jenkins

# Create the jenkins_config dictionary with security key
# Your code here

Need a hint?

Use jenkins_config = {"security": {}} to create the dictionary.

2

Add CSRF crumb issuer class variable

Create a variable called csrf_crumb_issuer and set it to the string "hudson.security.csrf.DefaultCrumbIssuer".

Jenkins

jenkins_config = {"security": {}}
# Create csrf_crumb_issuer variable with the crumb issuer class string
# Your code here

Need a hint?

Assign the exact string to csrf_crumb_issuer.

3

Configure CSRF protection in Jenkins config

Set the key crumbIssuer inside jenkins_config["security"] to the value of csrf_crumb_issuer.

Jenkins

jenkins_config = {"security": {}}
csrf_crumb_issuer = "hudson.security.csrf.DefaultCrumbIssuer"
# Set jenkins_config["security"]["crumbIssuer"] to csrf_crumb_issuer
# Your code here

Need a hint?

Use jenkins_config["security"]["crumbIssuer"] = csrf_crumb_issuer to set the crumb issuer.

4

Print Jenkins configuration to verify CSRF protection

Write a print statement to display the jenkins_config dictionary.

Jenkins

jenkins_config = {"security": {}}
csrf_crumb_issuer = "hudson.security.csrf.DefaultCrumbIssuer"
jenkins_config["security"]["crumbIssuer"] = csrf_crumb_issuer
# Print the jenkins_config dictionary
# Your code here

Need a hint?

Use print(jenkins_config) to show the configuration.