Render script displayed on the field description (on screens)

[Shlomi Perets]

After upgrading Jira Server (7.9) to the latest (8.12), Some of my fields showing the render script under their description below (Show attachments)

Is any one had this issue? I can't solve it without getting into each one of my field configurations and delete the description for each field.

)

[Nic Brough -Adaptavist- · Accepted solution]

Those scripts were placed there by your admins (presumably inexperienced ones who didn't know they should not be botching things with javascript like this)

You are already doing the right thing by removing the scripts from the descriptions.

[Shlomi Perets]

Hi

Thanks for your feedback.

I'm the admin, the Scripts weren't there before the upgrade, Something in the process got them there, I don't know why or how.

[Nic Brough -Adaptavist-]

The scripts were probably there before the upgrade, but most of the older versions of Jira would not display them when you look at the field configurations, so it's understandable why you thought they were not there.

[Teja]

Hi @Shlomi Perets 

In JIRA 8.7, they have set the option 'Enable HTML in custom field descriptions and list item values' OFF by default.
You can turn it ON or you can remove those scripts if you concern about security.

FYI- https://confluence.atlassian.com/jiracore/preparing-for-jira-8-7-983794309.html