OOO 3.1.7 Release Notes
Bug Fix
XSS Vulnerability for response returning JQL entered
When returning error on PUT calls to store user exclusion filters, the response returned user input text without escaping.
Content Type returned | Example | |
---|---|---|
Before | text/html | |
After | text/plain |
Issues