Forums
Home Product Q&A Discussion groups Articles Ask a question Search
Learning
Events
Champions

Forums

Articles
Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Product Q&A
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

Is it safe to enable Text Gadget on JIRA Server 7.12.3??

nallu
nallu July 14, 2019

I want to use Text gadget in jira to write some text and link websites on my dashboard But It says, Enabling text gadget makes jira instance vulnerable to XSS attacks. Is that okay to enable the text gadget on 7.12.3? Is that vulnerability still there? 

My assumption is, the vulnerability still would be there irrespective of jira version since it may contains plain HTML code. Please confirm. 

Answer
Watch
Like Be the first to like this
627 views

1 answer

1 accepted

0 votes
Answer accepted
Nic Brough -Adaptavist-
Nic Brough -Adaptavist-
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
July 14, 2019

You are right - it remains vulnerable.

View More Comments
nallu
nallu July 14, 2019

@Nic Brough -Adaptavist- Thanks for confirming, Nic. I could see that there is alternative solution for JIRA cloud - Rich Text Gadget for Jira 

Do we have something like that for JIRA Server?? 

Like
Reply

Suggest an answer

Log in or Sign up to answer
Jira
Jira
TAGS
AUG Leaders

Atlassian Community Events

    See all events
    Community
    Forums
    FAQs Forums guidelines
    Learning
    About learning Resources
    Events
    Champions
    Copyright © 2025 Atlassian
    Privacy Policy Terms Security
    Welcome illustration

    Welcome to the new Atlassian Community

    Online forums and learning are now in one easy-to-use experience.

    By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.