Issue search API protection

Owned by Adam Labus
Dec 19, 2024
1 min read

Available since v. 5.31.*

The issue search API will return information about all available fields in Jira if there is no defined query parameter “fields”.

However, in the case of large instances with a significant number of additional custom fields, such queries may potentially impact the overall performance of the application.

With this option, you can determine whether the API should be additionally secured for such scenarios.

If enabled, the API will refrain from returning search results for queries that lack a “fields” query parameter.

 

An illustration of a response generated by an enabled feature:

  • {JIRA_URL}/rest/api/2/search?fields=

  • {JIRA_URL}/rest/api/2/search?jql=project=SSD

Screenshot 2024-12-12 at 16.44.54.png

  • {JIRA_URL}/rest/api/2/search?fields=resolution

Screenshot 2024-12-19 at 15.22.39.png