Issue Summary

When embedding a JSD Widget on a webpage will result in a
ajs_group_id=null cookie being set. According to https://www.briskinfosec.com/blogs/blogsdetail/Null-Byte-SQL-Injection having the first cookie value set to null could sometimes be a bad thing.

In cases where the AWS SQLi protection rule is used, it will cause the Jira widget to get blocked due to having the first cookie ajs_group_id having a value of "null".

Workaround

There is currently no known method to bypass this AWS rule, which seems to be a false positive.