HTML Renderer module to be removed

Still need help?

The Atlassian Community is here for you.

Ask the community

 

Platform Notice: Cloud Only - This article only applies to Atlassian products on the cloud platform.

What's changing

The HTML Renderer module (com.atlassian.jira.plugin.system.renderers.wiki.macros:html) will be removed from JIRA Cloud on December 15th, 2016, to remove any potential security risks. This module creates an XSS vulnerability that could allow malicious users to gain system administrator permissions and use the cloud infrastructure for nefarious purposes. 

tip/resting Created with Sketch.

Wiki markup is unaffected by this change and can still be used across all JIRA Cloud applications.

Impact on your site

This module lets JIRA issue text be formatted in HTML. When the module is removed, HTML tags will not be honored and will be rendered as part of the issue text. For example, if you have been using the renderer to display text in bold in issue comments, the text will display as <strong>text in bold<strong> once the module is removed. 

Suggested solution

We recommend using wiki markup or transferring your existing content across to the Rich Text Gadget, that can be found in the Atlassian Marketplace. You can also contact our Cloud Support Team for help retrieving text previously stored in the HTML Renderer module once the module has been removed.  

Last modified on Nov 30, 2016

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.