When a permission is implied by another one (e.g. Run/Reply implied by Job/Configure), the disabled tooltip is using the attribute "title" and will display an information that is not un-escaped.
Introduced during SECURITY-1909.
|Field||Original Value||New Value|
|Summary||Disabled tooltips broken in the matrix||Disabled permission tooltips broken on Chrome|
|Status||Open [ 1 ]||In Progress [ 3 ]|
|Status||In Progress [ 3 ]||In Review [ 10005 ]|
|Resolution||Fixed [ 1 ]|
|Status||In Review [ 10005 ]||Closed [ 6 ]|