Loading...

XML

Word

Printable

Details

Type: Suggestion
Resolution: Fixed
Fix Version/s: 8.0.0
Component/s: None
Labels:

UIS:
45
Support reference count:
29
Current Status:

Hide

Atlassian Update – 28 January 2019

Hi everyone!
We're glad to announce that jQuery upgrade lands in Jira 8.0.
Thank you for your votes and comments on this issue.

Jira 8.0 includes the newest 2.x version, i.e. 2.2.4, together with jQuery migrate plugin 1.4.1 to ease the migration. However, we might remove the migrate plugin in the future with a proper notice beforehand.

Our jQuery 2.2.4 got two security patches for the following issues in order to address all-known jQuery security issues: https://bugs.jquery.com/ticket/11974 and https://github.com/jquery/jquery/issues/2432. Effectively, it means that jQuery available in Jira 8.0 has $.parseHTML method from jQuery 3.3.1 and auto-execution of scripts will be prevented by default when making AJAX requests with proper dataType not set.

If you're interested, please take a look at jQuery upgrade page under Preparing for Jira 8.0 for the details.

Kind regards,
Maciej Rzymski
Jira Server Team

Show
Atlassian Update – 28 January 2019 Hi everyone! We're glad to announce that jQuery upgrade lands in Jira 8.0. Thank you for your votes and comments on this issue. Jira 8.0 includes the newest 2.x version, i.e. 2.2.4, together with jQuery migrate plugin 1.4.1 to ease the migration. However, we might remove the migrate plugin in the future with a proper notice beforehand. Our jQuery 2.2.4 got two security patches for the following issues in order to address all-known jQuery security issues: https://bugs.jquery.com/ticket/11974 and https://github.com/jquery/jquery/issues/2432 . Effectively, it means that jQuery available in Jira 8.0 has $.parseHTML method from jQuery 3.3.1 and auto-execution of scripts will be prevented by default when making AJAX requests with proper dataType not set. If you're interested, please take a look at jQuery upgrade page under Preparing for Jira 8.0 for the details. Kind regards, Maciej Rzymski Jira Server Team
Feedback Policy:

We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

Description

NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

Actually the jQuery version used in JIRA is still using the function jQuery.browser which is deprecated and has been removed since jQuery 1.9.
In our plugins, we are using a newer version of jQuery but this causes conflicts between the two different versions breaking the new menu navigation.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List

acunetix.JPG
71 kB
13/Dec/2015 11:13 PM
acunetix2.JPG
27 kB
13/Dec/2015 11:13 PM
burp.JPG
33 kB
13/Dec/2015 11:13 PM
example.JPG
57 kB
13/Dec/2015 11:13 PM
Screen Shot 2018-09-12 at 10.50.51 AM.png
158 kB
14/Sep/2018 8:47 PM
Screen Shot 2018-09-12 at 10.50.51 AM.png
158 kB
12/Sep/2018 5:52 PM

Issue Links

is duplicated by

JRASERVER-66397 JQuery Update to the latest version

Closed

is related to

BSERV-10873 The version of jQuery in use is vulnerable to several issues

Closed

BAM-19990 The versions of jQuery and jQuery UI in use are vulnerable to several issues

Closed

CONFSERVER-55175 Vulnerable javascript library: jQuery

Closed

relates to

JRACLOUD-43422 The jQuery version used in JIRA needs to be updated

Closed

JRASERVER-67168 Browser console can be used to execute jQuery functions

Closed

MNSTR-1893 Loading...

resolves

JRASERVER-60203 Unable to remove user from Project Roles in project administration when the username starts with 0

Closed

JRASERVER-68646 New line character in issue summary can break issue search detailed view

Closed

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(2 relates to, 2 resolves, 16 mentioned in)

Activity

People

Assignee:: Maciej Rzymski

Reporter:: Andrea

Votes:: 43 Vote for this issue

Watchers:: 66 Start watching this issue

Dates

Due:: 08/Mar/2019

Created:: 18/May/2015 9:31 AM

Updated:: 11/Jan/2024 5:39 AM

Resolved:: 11/Feb/2019 12:37 PM