Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-42579

WebHook converts the percent character % into %25 thus failing the call.

XMLWordPrintable

    • 6.03
    • 20
    • Severity 3 - Minor
    • 11
    • Hide
      Atlassian Update – 16 April 2025

      Dear Customers,

      We’re pleased to announce that the issue with webhook URL handling has been addressed in Jira 10.7.0.

      These improvements ensure that:

      1. Configured callback URLs are processed as-is, with no additional encoding or decoding applied. For example, %25=%3D%3D remains %25=%3D%3D.
      2. All substitution values (e.g., modifiedUser.name) are escaped, so %25=%3D%3D becomes %2525=%253D%253D, ensuring a user with a funny name will not break the URL.

      For customers using Jira 10.3.5 LTS and higher, or Jira 10.6.0 and higher (note: not 10.4.x or 10.5.x), you can achieve the same behavior by enabling the system property:

      plugin.webhooks.skip.url.reencoding=true

      This property is automatically enabled in Jira 10.7.0.

      Best regards, 
      Daniel Rauf 
      Software Engineer

      Show
      Atlassian Update – 16 April 2025 Dear Customers, We’re pleased to announce that the issue with webhook URL handling has been addressed in Jira 10.7.0. These improvements ensure that: 1. Configured callback URLs are processed as-is, with no additional encoding or decoding applied. For example, %25=%3D%3D remains %25=%3D%3D . 2. All substitution values (e.g., modifiedUser.name ) are escaped, so %25=%3D%3D becomes %2525=%253D%253D , ensuring a user with a funny name will not break the URL. For customers using Jira 10.3.5 LTS and higher, or Jira 10.6.0 and higher ( note: not 10.4.x or 10.5.x ), you can achieve the same behavior by enabling the system property: plugin.webhooks.skip.url.reencoding= true This property is automatically enabled in Jira 10.7.0. Best regards,  Daniel Rauf  Software Engineer

      NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

      Actual Results:

      Looking into the application log we can see %20 character (space) was converted to %2520 hence failing the call.

      [atlassian.webhooks.plugin.PublishTaskFactoryImpl$PublishTaskImpl] Client error - when posting to web hook at 'http://sample.com/executions?argString=-sshPassword1%2520password&user_id=admin&user_key=admin'

      Expected Results:

      JIRA should calls the exact URL that has been used to created the WebHook like the one below.

      http://sample.com/executions?argString=-sshPassword1%20password&user_id=admin&user_key=admin'

      Steps to reproduce:

      1. Create a new WebHook using the test URL: http://sample.com/executions?argString=-sshPassword1%20password

      Workaround:

      For customers using Jira 10.3.5 LTS and higher, or Jira 10.6.0 and higher (note: not 10.4.x or 10.5.x), you can activate the fix by enabling the system property:

      plugin.webhooks.skip.url.reencoding=true

      This property is automatically enabled starting from Jira 10.7.0.

        1. webhook.png
          webhook.png
          45 kB
        2. Screen Shot 2015-04-09 at 14.45.12.png
          Screen Shot 2015-04-09 at 14.45.12.png
          41 kB

              drauf Daniel Rauf
              lfagundes Luciano Fagundes (Inactive)
              Votes:
              30 Vote for this issue
              Watchers:
              30 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Estimated:
                  Original Estimate - 1m
                  1m
                  Remaining:
                  Remaining Estimate - 1m
                  1m
                  Logged:
                  Time Spent - Not Specified
                  Not Specified