the javascript injection in edit configuration of Custom Fields throws a XSS - Cross Site scripting error.

[meena bhujang]

How to deal with it? is there a safe way? I am using JIRA version 5.2. Is there a newer version that has the auto render ability for multi select custom fields?

[MB]

Just make sure that javascript is accessing urls that match all these things, just like the originating page, in which that script was loaded:

• protocol specification (http / https)
• host name (www.atlassian.com)
• port number (if present after the host name)

Javascript ajax calls will be restricted to these 3 or the XSS error will appear. So, without any code samples I can't provide any more help than this :(