JavaScript injection in the Announcement Banner in jira 7

Question

As the application allows a valid user to insert java script in the announcement banner which is redirecting to some other site. Eg: Welcome I want to prevent this injection in announcement banner. Need help on this. Version of jira is 7.0 .

Sachin Dhamale_o1c5zi · Answer

Hi @manojkumar3036

Only Jira admin has right to apply any script to the announcement banner.

You can remove jira admin permission for the user you want to restrict.

Thanks,

Sachin

AlexD_pene4l · Answer

<\code>alert(сообщение)

Gezim Shehu [Communardo] · Answer

Do you mean unauthorized users can inject ?

I am not aware of that.