[JRASERVER-38866] Disallow HTML markup for select list custom field option values

Type: Bug
Resolution: Fixed
Priority: Low (View bug fix roadmap)
Fix Version/s: 8.7.0
Affects Version/s: None
Component/s: Issue - Fields
Labels:

Support reference count:
3
Symptom Severity:
Severity 3 - Minor
UIS:
3
Bug Fix Policy:
View Atlassian Server bug fix policy

The option values for this custom field type are already html escaped in Jira Cloud due to security concerns. This issue is to track switching the default value for the "Enable HTML in custom field descriptions and list item values" setting to be "OFF" by default.

derived from

JRASERVER-38827 Putting HTML tags into multi-select options interferes with filtering

Closed

is related to

JRACLOUD-66392 Remove text from Select List Custom Field configuration UI suggesting HTML markup is supported within option values

Closed

JRASERVER-61876 Custom field is not rendering HTML content in JIRA 7 and above

Gathering Impact

JRASERVER-70859 Disallow HTML in custom field descriptions and list item values by default

Closed

has action: RM-11291 Failed to load

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(9 mentioned in)

No work has yet been logged on this issue.

Assignee:: Daniel Rauf

Reporter:: Oswaldo Hernandez (Inactive)

Affected customers:: 17 This affects my team

Watchers:: 28 Start watching this issue

Created:: 23/Jun/2014 5:31 AM

Updated:: 21/Jan/2021 11:50 PM

Resolved:: 03/Feb/2020 4:52 PM

Details

Description

Attachments

Issue Links

Forms

Activity

People

Dates