Environment:
-
Component: Kibana (TSVB / Markdown Visualization)
-
Upgrade Path: Version 9.4.3 →→ Version 9.5.6
-
OS / Deployment: RPM installation on RedHat / CentOS / Rocky Linux
1. Symptom / Description
After performing a rolling upgrade of the Elastic Stack from version 9.4.3 to 9.5.6 using RPM packages, raw HTML tags (such as <br/>, <div style="...">, etc.) embedded inside TSVB (Time Series Visual Builder) metrics or Markdown panels are no longer rendered as HTML elements. Instead, they are treated as plain text and printed literally on the dashboard UI.
2. Steps to Reproduce
-
Create or open an existing TSVB metric/markdown panel in Kibana (configured on version 9.4.3) containing custom HTML tags for formatting or line breaks.
-
Upgrade Elasticsearch, Kibana, Logstash, and Filebeat from version 9.4.3 to version 9.5.6 via RPM.
-
Access the dashboard and observe the panel.
3. Expected Result
HTML tags (e.g., style adjustments, bold fonts, line breaks) should be properly parsed and rendered by the dashboard UI,matching the behavior in version 9.4.3.
4. Actual Result
The HTML code is escaped or displayed as plain strings on the screen, breaking the layout and formatting of existing metric dashboards.
5. Additional Context / Screenshots
-
Attached error/behavior screenshot showing raw tags visible on the panel.
-
Requesting clarification whether this is a breaking security change (HTML sanitization policy) introduced in version 9.5.x, or if there is a specific configuration flag in
kibana.ymlto re-enable raw HTML/Markdown execution for legacy TSVB panels.
