[#JRA-7403] Trackback sending "secured" text to another site

JIRA

Trackback sending "secured" text to another site

Created: 21/Jul/05 02:15 PM Updated: 30/Jul/06 07:35 PM

Component/s:

Trackbacks

Affects Version/s:

3.2.1

Fix Version/s:

3.4

Time Tracking:

Not Specified

Issue Links:

Reference

This issue relates to:

~~JRA-8384~~ Allow trackback to send requests to only public URLs

Participants:	Anton Mazkovoi [Atlassian], Chanan Braunstein, Mark Chaimungkalanont [Atlassian] and Nick Minutello
Since last comment:	3 years, 35 weeks, 1 day ago
Resolution Date:	20/Oct/05 10:05 PM
Labels:

Description

« Hide

I have trackbacks turned on (I was hopping to use it with confluence but no luck there), We posted an issue on our jira which does not have anonymous access, that had a link to another site that happens to use trackbacks. Even though we dont allow anonymous access a portion of the issue report showed up on their site:

http://stlq.info/archives/002009.html

Scroll down and you will see [KWS-933] and above that some of the text from the issue.

All

Comments

Work Log

Change History

Sort Order:

[ Permalink | « Hide ]

Anton Mazkovoi [Atlassian] added a comment - 25/Jul/05 08:18 PM

The problem is that JIRA will send trackback information to the public website about the issue, even if the issue itself is not publically accessible.

At the moment the only way around this is to turn off outgoing trackbacks.

[ Permalink | « Hide ]

Mark Chaimungkalanont [Atlassian] added a comment - 20/Oct/05 10:05 PM

JIRA will now respect an issue's permissions and only perform a trackback ping when the issue is publicly visible.

[ Permalink | « Hide ]

Nick Minutello added a comment - 30/Oct/05 08:17 PM

Can we pls make this configurable?

Our Jira server isnt public so users dont see all 400 projects when they log in.

Your best bet is to make it configurable per project...

[ Permalink | « Hide ]

Anton Mazkovoi [Atlassian] added a comment - 30/Oct/05 09:10 PM

Nick,

What woud you like to be configurable per project? Do you mean that in some projects you would like to send track backs even if teh resource is protected by permissions?

Anton

[ Permalink | « Hide ]

Nick Minutello added a comment - 31/Oct/05 09:05 PM

All our projects are "protected" by permissions. (not because the issues are sensitive - just that no-one else really wants to know about them)

So, yes, we want projects (or the whole server) to be able to send trackbacks regardless of this fact