Filter for announcement banner in JIRA7.0

manojkumar3036

Hi All,

I want to apply a filter for the announcement banner in JIRA as the JIRA application allows any login user to inject any kind of java script for open redirection, general configuration or System Announcement. So there can be XSS attack!!. I want to prevent the script injection in those announcement banner, general configuration or system announcement areas. 

Fazila Ashraf

Hi @manojkumar3036

You are mistaken. Jira just doesnt allow 'any' logged in user to update the announcement banner. 

It allows only the JIRA administrators to do that.