Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-14506

Failed Jelly Run does not escape HTML from the Jelly INPUT

    XMLWordPrintable

Details

    Description

      When there are HTML tags in the Jelly input, for example in an issue description, these tags will be interpreted in the errordump.

      It can break the display and also prevent the developer from reading the error message.

      Please convert special characters into html entities to avoid these problems.

      Thanks

      Nicolas.

      [EDIT] :
      I triggered this bug a while ago, so I had troubles reproducing it.

      This sample will raise it :

      <JiraJelly xmlns:jira="jelly:com.atlassian.jira.jelly.JiraTagLib">
      <jira:CreateIssue description="
      
      <form method='post' action='&amp;'>
      
      <input type='text' size='150'/>
      
      </form>
      
      " issueType="Bug" priority="Major" project-key="PYWP" summary="sum" />
      </JiraJelly>
      

      This one is tricky : If you remove &amp; from the action, the code will get parsed correctly

      I will provide other code examples, if you need so.

      Attachments

        Activity

          People

            chris@atlassian.com Chris Mountford
            2f58304fe356 nicdumz
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: