Summary

The Hipchat post function shows Error when connecting to HipChat API. Please check the configured HipChat API token and retry. when JQL filter is used in the setup. Also the notification preview is broken. There is no error message on JIRA log.

Steps to Replicate

1. Integrate Hipchat to Jira.
2. Once integration is completed, add a new 'Notify Hipchat' post function to any status transitions.
3. For the JQL field , add in reporter = <ANY_USER> .
4. Type in a message, the notification preview doesn't show.
5. Save the post function.

Expected result

The post function should save without issue.

Current result

1. The notification preview doesn't updated as message is typed into the text box. Also if you have the network console out, the error NetworkError: 403 Forbidden - https://<BASE_INSTANCE_URL>/rest/hipchat/integrations/1.0/message/render can be seen there as well.
2. The post function shows Error when connecting to HipChat API. Please check the configured HipChat API token and retry. after saving.

Analysis
This only happens in Cloud because we found a vulnerability in previous versions of HipChat and we denied access to some urls.
More information in here: https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785.html
Ticket: https://jira.atlassian.com/browse/JRA-44831
We are going to talk with the security team to open traffic to those requests again because the issue is fixed.