The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)
×Community resources
Community resources
Community resources
Possible to turn off HTML in Cloud?
I´ve gone through Skillbuilder Is your Jira Instance secure (for server/DC), and in that skillbuilder the underestimated risk due to javascript (based on activation of HTML) is discussed.
In server/DC Jira Admin may turn off (in General Configuration) Enable HTML in project description and Enable HTML in custom field descriptions and list item values. I have now looked for the same configuration options in Cloud, but cannot find any.
So, my question is really this: Is there not a potential for HTML/JavaScript and WebSudo session threat in Cloud? And if no, how has this been solved in cloud? And if there is a potential threat, how can I as a Jira admin secure my instance against these potential threats, as I cannot adjust settings anywhere?
0 answers
Comments for this post are closed
Community moderators have prevented the ability to post new answers.