Exactly what data is stored/transmitted outside of JIRA

[Barry Kaplan]

It is not at all clear if this feature is secure or not.

[Barry Kaplan]

So if I understand, you are only extending JIRA in the browser with javascript that runs locally and communicates directly with the hosted JIRA backend? (I could not see where the form posts to in the screenshot).

[Yaroslav Lazor]

Yes Barry,

it's JS code run through an iframe hosted on github.
And it runs locally. And communicates with the hosted JIRA backend.
Posting is done through an iframe not a form.
My point that it's hosted on github - was that we don't have access to the hosting service and can't intercept the data.
 

[Yaroslav Lazor]

Hi Berry, check the answer below and let me know if it was useful.

[Yaroslav Lazor]

Hi,

There is a data transfer between JIRA and the plugin

• content of "Checklists" field.
• on load
• and every time you check/uncheck any items.

Plugin is hosted on github.com, so a 3'rd party secure location, as for it's code source.
So we, as plugin developers, don't have access to server logs which would contain the content of the checklist. 

Plugin doesn't have any database and doesn't store any data by itself.
The only storage is done in your cloud JIRA instance in custom field "Checklists".

It's also easy to verify, by a developer, by inspecting the plugin in your Jira.

transmitted outside of JIRA - JIRA 2016-07-15 00-27-05.png