Issue Summary

When a user attempts to edit an existing comment that contains a code block with ../ (relative path traversal) characters, the comment cannot be saved. It fails with the error on the UI “Failed to save the comment. Please try again later."

Steps to Reproduce

1. Create a new page
2. Add a page comment (not inline comment) containing a code block with ../ characters and save
3. Now edit the comment
4. Save it again (doesn’t matters whether we modify anything or not)

Expected Results

The comment is saved successfully with the updated content, including the ../ characters in the code block.

Actual Results

The comment cannot be saved. It fails with the error on the UI “Failed to save the comment. Please try again later."

From the conf_access_log, we can see as below:

A successful call when we add a new comment::

172.50.0.2 admin [20/Jul/2026:13:08:49 +0000] "POST /confluence/rest/tinymce/1/content/196694/comment?actions=true HTTP/1.1" 200 770 338 /confluence/rest/tinymce/1/content/196694/comment http-nio-8090-exec-46 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 

While editing the same comment, it throws a 400 Bad Request error.

172.50.0.2 admin [20/Jul/2026:13:30:13 +0000] "POST /confluence/rest/tinymce/1/content/196694/comments/196701?actions=true HTTP/1.1" 400 763 4 /confluence/rest/tinymce/1/content/196694/comments/196701 http-nio-8090-exec-13 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 

Workaround

Delete the comment and re-create it with the updated content.