Update Velocity Engine to 2.0+

XMLWordPrintable

    • Type: Suggestion
    • Resolution: Unresolved
    • None
    • Component/s: None
    • None
    • 0

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      If user macros are defined in a velocity template, they can potentially be included without rendering due to a Velocity bug https://issues.apache.org/jira/browse/VELOCITY-776

      Ideally JIRA will update its internal version of Velocity1.7/VelocityTools>= 2.0 which contains the fix, released 17 JUL 2016. Currently JIRA 7.3 is shipping with V1.6.4

      The workaround is put UserMacro definitions inside ./atlassian-jira/WEB-INF/classes/templates/email/macros.vm so they are defined statically.

      The 2.0. release has been available since JUL 2017

      - http://central.maven.org/maven2/org/apache/velocity/velocity-engine-core/2.0/

      https://dist.apache.org/repos/dist/dev/velocity/velocity-engine/2.0/release-notes.html

            Assignee:
            Unassigned
            Reporter:
            Andy Brook
            Votes:
            17 Vote for this issue
            Watchers:
            11 Start watching this issue

              Created:
              Updated: