# \[Bug Report\] Raw HTML rendering in TSVB / Markdown panel disabled or stripped after upgrading from v9.4.3 to v9.5.6

**URL:** <https://discuss.elastic.co/t/bug-report-raw-html-rendering-in-tsvb-markdown-panel-disabled-or-stripped-after-upgrading-from-v9-4-3-to-v9-5-6/391419>\
**Category:** Kibana\
**Created:** [November 6, 2026, 8:50am UTC](https://discuss.elastic.co/t/bug-report-raw-html-rendering-in-tsvb-markdown-panel-disabled-or-stripped-after-upgrading-from-v9-4-3-to-v9-5-6/391419 "2026-11-06T08:50:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dylan\_Juan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dylan_juan/32/124263_2.png) [@Dylan\_Juan](https://discuss.elastic.co/u/Dylan_Juan)\
**Post date:** [November 6, 2026, 8:50am UTC](https://discuss.elastic.co/t/bug-report-raw-html-rendering-in-tsvb-markdown-panel-disabled-or-stripped-after-upgrading-from-v9-4-3-to-v9-5-6/391419/1 "2026-11-06T08:50:47Z")

</div>

**Environment:**

- **Component:** Kibana (TSVB / Markdown Visualization)

- **Upgrade Path:** Version 9.4.3 →→ Version 9.5.6

- **OS / Deployment:** RPM installation on RedHat / CentOS / Rocky Linux

#### **1. Symptom / Description**

After performing a rolling upgrade of the Elastic Stack from version **9.4.3** to **9.5.6** using RPM packages, raw HTML tags (such as `<br/>`, `<div style="...">`, etc.) embedded inside TSVB (Time Series Visual Builder) metrics or Markdown panels are no longer rendered as HTML elements. Instead, they are treated as plain text and printed literally on the dashboard UI.

#### **2. Steps to Reproduce**

1. Create or open an existing TSVB metric/markdown panel in Kibana (configured on version 9.4.3) containing custom HTML tags for formatting or line breaks.

2. Upgrade Elasticsearch, Kibana, Logstash, and Filebeat from version 9.4.3 to version 9.5.6 via RPM.

3. Access the dashboard and observe the panel.

#### **3. Expected Result**

HTML tags (e.g., style adjustments, bold fonts, line breaks) should be properly parsed and rendered by the dashboard UI,matching the behavior in version 9.4.3.

#### **4. Actual Result**

The HTML code is escaped or displayed as plain strings on the screen, breaking the layout and formatting of existing metric dashboards.

#### **5. Additional Context / Screenshots**

- Attached error/behavior screenshot showing raw tags visible on the panel.

- Requesting clarification whether this is a breaking security change (HTML sanitization policy) introduced in version 9.5.x, or if there is a specific configuration flag in `kibana.yml` to re-enable raw HTML/Markdown execution for legacy TSVB panels.

 ![WhatsApp Image 2026-11-06 at 15.50.30](https://us1.discourse-cdn.com/elastic/original/3X/0/e/0e3b5fcdf6f25d75c5a1c545de6ef8eaba8c3a65.jpeg)
