JavaScript injection in the Announcement Banner in jira 7

[manojkumar3036]

As the application allows a valid user to insert java script in the announcement banner which is redirecting to some other site. 

Eg: Welcome<script>window.location.href='some other site'</script> 

I want to prevent this injection in announcement banner. Need help on this. Version of jira is 7.0 . 

[Sachin Dhamale]

Hi @manojkumar3036 

Only Jira admin has right to apply any script to the announcement banner.

You can remove jira admin permission for the user you want to restrict.

Thanks,

Sachin

[Gezim Shehu [Communardo]]

Which is your request exactly?

Want to know if this is possible?

[manojkumar3036]

I want to restrict the script injection in the announcement banner!! 

[manojkumar3036]

@Gezim Shehu [Communardo] The currently version which i am using is 7.0. 

[Gezim Shehu [Communardo]]

Do you mean unauthorized users can inject ?

I am not aware of that.

[AlexD]

<\code>alert(сообщение)<code>