[JSWSERVER-26311] Inadequate documentation of Velocity template allowlisting after Jira 10.0.X - Create and track feature requests for Atlassian products.

We couldn't load the project sidebar. Refresh the page to try again.
If the problem persists, contact your Jira admin.

Type: Suggestion
Resolution: Unresolved
Fix Version/s: None
Component/s: Data Center, Documentation
Labels:
None

UIS:
5
Support reference count:
5
Feedback Policy:

We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

Problem

Velocity template and allowlist security improvements as listed in the Jira Software 10.0.x release notes

Adding the custom velocity template to the allowlist, through the process described on these pages:

However, they are developer documents and are not very helpful for Jira end users. None of them explains

Where to allow these methods
How to include all files under /templates/email
What is the proper format?
Does it work with wildcards?
What is this allowlist plugin module and how to use it?

Suggested Solution

Clear knowledge article is that explains the Velocity change ( Jira Software 10.0.x release notes) is requires

is related to

JRASERVER-78648 Lot of WARN log messages for Method needs allowlisting.

Gathering Interest

Form Name

There are no comments yet on this issue.

Assignee:: Unassigned

Reporter:: Baris Ilhan

Votes:: 7 Vote for this issue

Watchers:: 7 Start watching this issue

Created:: 18/Feb/2025 1:44 PM

Updated:: 3 days ago 2:23 AM