Problem Definition

For XSS protection, certain "dangerous" characters are not allowed for input in many fields in Bamboo, including for requirements. One such character is the ampersand (&), which can be used for logical AND expressions (such as "a && b" for "a AND b"). At the moment, because XSS protection applies to these fields too, these characters cannot be used in requirements even though they are necessary for the requirements to be processed correctly.

Suggested Solution

A Bamboo administrator should have a way to override or disable the XSS protection (either as a global option or on a more granular level).

Workaround

There is no workaround available