Checking URLs against the Jira allowlist
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
You can configure Automation for Jira to check all URLs included in actions, webhooks, and other items against the Jira allowlist. Thanks to that, you'll make sure that any URLs is accepted and considered secure.
Solution
Before you begin
Make sure to enable and configure the Jira allowlist before enabling this option. If a URL isn't on the allowlist, some of your existing actions or webhooks might stop working. For more info, see Configuring Jira allowlist.
Enabling the URL allowlist
To enable the URL allowlist:
Go to Global Configuration.
Enable the URL allowlist.
Was this helpful?