IMPORTANT: JAC is a Public system and anyone on the internet will be able to view the data in the created JAC tickets. Please don’t include Customer or Sensitive data in the JAC ticket.
Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-27864

JIRA OnDemand announcement banner

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Won't Do
    • None
    • None
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      Recently we tightened up security in all JIRA OnDemand instances by not allowing arbitrary HTML in the announcement banner. We fixed this vulnerability by only allowing plain text or wiki markup in the announcement banner.

      We would like to come up with a compromise if possible that still allows customers to accomplish what they were previously using the announcement banner for in a secure way. In order for that to happen we would like to know how you were using the announcement banner. Please comment on this issue to let us know how you have been using HTML in the announcement banner.

      Regards,

      Roy Krishna
      JIRA OnDemand Product Manager

            Loading...
            IMPORTANT: JAC is a Public system and anyone on the internet will be able to view the data in the created JAC tickets. Please don’t include Customer or Sensitive data in the JAC ticket.
            Uploaded image for project: 'Jira Data Center'
            1. Jira Data Center
            2. JRASERVER-27864

            JIRA OnDemand announcement banner

            XMLWordPrintable

              • Icon: Suggestion Suggestion
              • Resolution: Won't Do
              • None
              • None
              • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

                NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

                Recently we tightened up security in all JIRA OnDemand instances by not allowing arbitrary HTML in the announcement banner. We fixed this vulnerability by only allowing plain text or wiki markup in the announcement banner.

                We would like to come up with a compromise if possible that still allows customers to accomplish what they were previously using the announcement banner for in a secure way. In order for that to happen we would like to know how you were using the announcement banner. Please comment on this issue to let us know how you have been using HTML in the announcement banner.

                Regards,

                Roy Krishna
                JIRA OnDemand Product Manager

                        Unassigned Unassigned
                        rkrishna Roy Krishna (Inactive)
                        Votes:
                        2 Vote for this issue
                        Watchers:
                        21 Start watching this issue

                          Created:
                          Updated:
                          Resolved:

                            Unassigned Unassigned
                            rkrishna Roy Krishna (Inactive)
                            Votes:
                            2 Vote for this issue
                            Watchers:
                            21 Start watching this issue

                              Created:
                              Updated:
                              Resolved: