Problem description
As part of fixing a security vulnerability FE-7163: Stored XSS in administrative linker functionality through the href parameter - CVE-2018-20240 (fixed in FishEye 4.7.0) we introduce the file <FISHEYE_HOME>/syntax/url.def to whitelist url definitions. As consequence, some non-http linkers without entry in that file, stopped working in Fisheye/Crucible v 4.7

Suggestion
Add more definitions as we encounter more use cases, such as a definition for advcrm

Workaround
For advcrm add the following entry in the file <FISHEYE_HOME>/syntax/url.def

# advcrm
  /\b(?:advcrm:(?:(?:[a-zA-Z\d$\-_.+!*'(),;\/?:@&=]|(?:%[a-fA-F\d]{2}))+))/ : {
    region {href="${0}";}
  }

Thanks to that, all links with this scheme (and rest of the url will pass this regex check) will be rendered on UI.

Steps:

1. Switch off Fisheye/Crucible
2. add new entry to the file (file location and entry above)
3. launch Fisheye/Crucible
4. All links should be rendered