Jira version in email

[Allan Libby]

How do I remove the Jira version information from notifications sent by the system?  This is a very basic security issue, and yet I cannot find out how anywhere?

Also, I've seen the only way to remove the version info from the application itself is to edit one of the system files?  This is a bit worrisome as it is a basic security request.  I am worried about the lack of caring the Jira team has for security of their app (this and using a very old and insecure version of JQuery still).

[Bastian Stehmann · Accepted solution]

Hi @Allan Libby,

I think you will have to modify the velocity templates if you want to do that. But I  do not recommend that, as they will be overwritten with every update, so you have to do it again after every update.

[Allan Libby]

I know you have to for the footer.  Do you have to do this for the email notifications too?

[Bastian Stehmann]

As far as I know, yes. I do not know any other way at the moment to change the notifications. 

[Allan Libby]

I'll have to submit a feature request then, to go into the black hole of never getting done.  This is web application 101, never expose the version of your application to the public.

[Bastian Stehmann]

I totally agree that this should be easier.

If you add a feature request, maybe you can link it here, that will probably bring some more votes.

[Allan Libby]

I raised a feature request

https://jira.atlassian.com/browse/JSDSERVER-6176

[Bastian Stehmann]

Just added my vote.