After update to version 8.13.1, i have error on customfield

[Andrew Boswell]

Hello,

After update, i have this error on customfield :

>>>

<script type="text/javascript">
(function($) {
AJS.$("#customfield_10040 option[value='-1']").remove(); //Removes the default value "None"
function convertMulti(id){
if (AJS.$('#'id"-textarea").length == 0){
new AJS.MultiSelect(

{ element: $("#"+id), itemAttrDisplayed: "label", errorMessage: AJS.params.multiselectComponentsError }

);
}
}

AJS.toInit(function()

{ convertMulti("customfield_10040"); }

)

JIRA.bind(JIRA.Events.NEW_CONTENT_ADDED, function (e, context)

{ AJS.$("#customfield_10040 option[value='-1']").remove(); convertMulti("customfield_10040"); }

);
})(AJS.$);
</script>

<<<

This error is present when I create a new ticket (in the screen).

Have you ever had the case?

Thank you in advance and have a nice day.

[Daniel Ebers · Accepted solution]

Hi Marc,

I guess you upgraded from an earlier version where HTML in custom field description was set to "on" by default.

This is now "off" per default as it can be used to craft an exploit (in worst case).

According to the settings overview you can switch it back on using the setting "Enable HTML in custom field descriptions and list item values" (Explanation: Allows to add HTML to the descriptions of custom fields and the values of list items.).
Please do a security evaluation then on your own.
Also, it is reported here in Community that Custom Java Script in Custom Field description tend to show the funniest effects. But, I know, there are cases where it seems just needed.

Let us know if this helped.

Regards,
Daniel

[Andrew Boswell]

Hi Daniel,

Thank you for your answer.

I just went to check and the parameter is already OFF.

Do you have any other idea?
Because I really only have this customfield that is a problem...

Thank you in advance and have a nice day.

[Daniel Ebers]

In order to work it must be ON.

When switched off like you said it will be treated just as text with no meaning.

[Andrew Boswell]

YES!

It works, thank you very much.

[Daniel Ebers]

I am glad this helped - if you don't mind please accept my answer using "Accept answer". This will help others with the same question to find the answer quicker.

Many thanks in advance!