Simplest workaround for now is to allow scripting rights for the book editors. The warning mentioning programming rights will still appear (not each the time), but it does not affect the functionality.
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6)
If image attachments aren't displayed, see this article.