[java-sig-commits] [Bug 1819211] CVE-2020-2162 jenkins: Content-Security-Policy headers for files uploaded leads to XSS