HTML Renderer module to be removed
Platform Notice: Cloud Only - This article only applies to Atlassian products on the cloud platform.
What's changing
The HTML Renderer module (com.atlassian.jira.plugin.system.renderers.wiki.macros:html) will be removed from JIRA Cloud on December 15th, 2016, to remove any potential security risks. This module creates an XSS vulnerability that could allow malicious users to gain system administrator permissions and use the cloud infrastructure for nefarious purposes.
Wiki markup is unaffected by this change and can still be used across all JIRA Cloud applications.
Impact on your site
This module lets JIRA issue text be formatted in HTML. When the module is removed, HTML tags will not be honored and will be rendered as part of the issue text. For example, if you have been using the renderer to display text in bold in issue comments, the text will display as <strong>text in bold<strong> once the module is removed.
Suggested solution
We recommend using wiki markup or transferring your existing content across to the Rich Text Gadget, that can be found in the Atlassian Marketplace. You can also contact our Cloud Support Team for help retrieving text previously stored in the HTML Renderer module once the module has been removed.