Why am I getting advertisements inside my JIRA tickets?

[Mark Eggermont]

Hi, 

On entering below code inside a JIRA ticket I'm getting (unwanted) advertisement.

On code UP.FI

select (FreeC6, Date, FreeD1, NewUserName, FreeC1, UP.ItemNo, UP.Actienummer, FI.FreeC1, FI.Company, FI.F7173, FI.Rep) from (AU)
where (FreeD1<>'')
with (UP)
where (ItemNo='$parValue')
with (UP.FI)

I've seen similar complaints (Solved: Annoying Advertising - "VS Code" field showing up ... (atlassian.com)).

I think it is unseemly these kinds of advirtisments are possible in a payed for product!

Please remove or thisable this for our at least our domain https://keuneprojects.atlassian.net/jira/software/

Kind regards,

Mark Eggermont - Royal Keune 

meggermont@keune.com

[Andy Heinzer · Accepted solution]

Hi Mark,

I think I see what happened here.  The .FI is likely making the editor within Jira believe that this is a top level domain name TLD (.fi being for domains in Finland if memory serves).

It looks like up.fi is not an in use domain, so what is happening is Jira is doing a look-up of the URL address of http://up.fi because it believes that you are wanting to create a URL link to a domain that is being parked by a name server.  I can see why you think this is an ad of sorts, because if you visit that URL it does feel like an ad to buy that domain.

If the text is formatted as code, this shouldn't happen.  So perhaps this was copied into a description or text field and then edited in a manner which appears to have created one of these auto-links.

What I would recommend to avoid this behavior would be to first create a Code Snippet.  You can also create one of these by typing ``` in the editor. Once you have a code snippet, then copy/enter you code direct there. Any code entered into that code snippet will not auto-format or auto-link.  But if you tried to copy/enter that code into a field like a description or comment, Jira doesn't know that this is code and it could be subject to automatically being formatted into hyperlinks or in some cases emojis :)

[marc -Collabello--Phase Locked-]

Hi @Andy Heinzer ,

Your explanation sounds plausible.

However I wonder:  This is information disclosure.  How is Atlassian handling lookup of such strings in installations with HIPPA controls where Atlassian has signed a BAA.

And similar, how is Atlassian handling this information disclosure in the FEDRAMP certification process?

[Mark Eggermont]

Thanks @Andy Heinzer for your reply. Your explanation makes sense, tested the code snippet and this indeed prevents the link to Sedo.com. My screenshot showed what happened after pasting text and then formatted as code in the comment section. However I agree with Marc. I do not think JIRA should check my text and auto connect  to a commercial party. Please crosscheck his with regulations etc.

I'll accept your answer, knowing what caused it makes me a little less worried :-).

[marc -Collabello--Phase Locked- · Accepted solution]

Hi @Mark Eggermont ,

This advertisement looks like it comes from a browser extension?

[Mark Eggermont]

Why do you think that?

Tested it in both Edge and Chrome, same issue in both browsers.

Will try and check settings and add it to the ticket...

Thx for your quick reply/remark.

[Mark Eggermont]

No extensions installed in Edge yet.

Looked similar as mentioned issue (Solved: Annoying Advertising - "VS Code" field showing up ... (atlassian.com)). Not related?

[marc -Collabello--Phase Locked-]

I was assuming it was a browser extension because it displayed the graphical "S" before the ad message.

My recommendation is to contact Atlassian support directly.