-
Bug
-
Resolution: Fixed
-
Low
-
8.1.0, 8.0.2, 8.2.3
-
8
-
2
-
Severity 3 - Minor
-
Issue Summary
Steps to Reproduce
- Create a Custom Field with the following description:
<script type="text/javascript"> alert("Javascript in Custom Field"); </script>
- Add it to all screens.
- Edit the issue and add a value to the custom field.
- Reload the page
Expected
The JavaScript would be executed on page load, and the user would receive an alert in the browser.
Actual
The JavaScript is not executed, unless the custom field is edited (through inline editing).
Notes
- This happens even with the Enable HTML in custom field descriptions and list item values set to ON.
Workaround
Adapt the JavaScript to add it to the Announcement Banner instead.
- relates to
-
JRASERVER-65600 As an JIRA Administrator I want to disable all JavaScript in JIRA input except JIRA banner
- Gathering Interest