Email notifications about new comments are displayed incorrectly if comment is formatted.
Description
User who subscribes to the link gets email notification about changes in Approval Path that are displayed incorrectly
Please test if XSS payload is escaped in raw html
Activity
Show:
Details
Priority
MediumAssignee
Mariusz Szymański
Reporter
Iga Popławska
Fix versions
Roadmap
Created
3 January 2022, 12:05
Updated
30 June 2023, 14:27
More fields
Created: 3 January 2022, 12:05
Updated:
30 June 2023, 14:27
@Mariusz SzymańskiFix verified - QA environment.
@Mariusz Szymański
It turned out to be a broader issue as all notifications about comments were broken if the comment had any kind of formatting (so colors, bolded font etc.). Comment body send with comment event has an odd formatting, partially it’s markdown, but things like colors and links have some weird custom markups. To fix this issue, I’ve added additional call to Jira API to get rendered body for comment.
Right now we support only text email messages. Text format will look like this.
We should add HTML email format. We could convert this markdown to html.