Uploaded image for project: 'Xporter for Jira Cloud'
  1. Xporter for Jira Cloud
  2. XPORTERCLOUD-2641

[Cloud] Word export: QR codes, Gliffy diagrams and attachment tables are no longer rendered in the Aspose 26.8 build

    XporterXMLWordPrintable

Details

    • Bug
    • Status: Resolved
    • Medium
    • Resolution: Unresolved
    • Xporter Cloud 9.4.2
    • Xporter Cloud 10.2.0
    • Xporter Engine
    • None
    • Jira Cloud

    • UNCOVERED

    Description

      Summary
      In the Aspose 26.8 build some images that the template loads from a URL are not rendered: a QR code is replaced by a broken image placeholder, a Gliffy diagram comes out empty and the attachments table of a Service Desk ticket is missing.

      How to Reproduce

      1. Use the Aspose 26.8 build of Xporter Cloud.
      2. Export SD-5 with the template Ticket_Detail_DueDate (QR code in the header), QP-9 with Aut_Gliffy, or SD-1 with Service Desk - Ticket Detail.
      3. Open the generated document.
        Expected result: The QR code, the Gliffy diagram and the attachments table are rendered.
        Actual result: The QR code shows a broken image placeholder, the Gliffy diagram is empty and the attachments table is missing.

      Affected automation tests

      • Ticket_Detail_DueDate
      • AddOnGliffy
      • SD_Detail

      Technical notes
      Bamboo builds XA-XCA #893 and #894 (DOCX) and XA-ASXCX #263 and #264 (XLSX) on xporter-tst, run on 2026-10-09 with a single engine container (engine 3.2.1, Aspose 26.8). Both runs of each format fail the same tests with identical documents. Found on the Aspose 26.8 build, not released yet.
      Not verified. The same build includes the SSRF and local file hardening (XPOR-1199, XPOR-1200), which stops Aspose fetching external resources and validates the hosts the ResourceManager loads. These three cases all depend on loading a resource by URL, so the hardening is the most likely cause rather than Aspose itself.
      Check the engine-service log of these exports for blocked or failed resource loads and decide whether each case is an accepted consequence of the hardening or must be allowed.

      Cloned from Sembi XPOR-1312 (https://sembi.atlassian.net/browse/XPOR-1312).

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              carolina.molina Carolina Molina
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated: