Filter for announcement banner in JIRA7.0

[manojkumar3036]

Hi All,

I want to apply a filter for the announcement banner in JIRA as the JIRA application allows any login user to inject any kind of java script for open redirection, general configuration or System Announcement. So there can be XSS attack!!. I want to prevent the script injection in those announcement banner, general configuration or system announcement areas. 

[Fazila Ashraf · Accepted solution]

Hi @manojkumar3036

You are mistaken. Jira just doesnt allow 'any' logged in user to update the announcement banner. 

It allows only the JIRA administrators to do that.

[Fazila Ashraf]

Hi @manojkumar3036, If my answer helped, you can choose to accept the answer (The tick mark just before my answer) :)